---
id: 5136
title: "[CVE-2020-5902] Remote Code Execution in F5 Big‑IP"
cve: CVE-2020-5902
source_domain: swarm.ptsecurity.com
source_url: "https://swarm.ptsecurity.com/rce-in-f5-big-ip/"
published_at: "2020-07-15T00:00:38Z"
tags: ["rce", "vulnerability-research", "f5", "big-ip", "tmui", "cve-2020-5902"]
phying_url: "https://phying.com/item/5136"
lang: en
---

# [CVE-2020-5902] Remote Code Execution in F5 Big‑IP

## Summary

Mikhail Klyuchnikov recounts discovering CVE-2020-5902, an unauthenticated RCE rated CVSS 10 in F5 Big-IP's TMUI web interface, with over 8,000 devices exposed on the internet before fixes.

## Intelligence Metadata

- **Sources:** swarm.ptsecurity.com
- **CVE:** CVE-2020-5902
- **Published:** 2020-07-15T00:00:38Z
- **Original:** https://swarm.ptsecurity.com/rce-in-f5-big-ip/
- **Phying News:** https://phying.com/item/5136