New Snort rule addresses critical vulnerability in F5 BIG-IP
Summary: Cisco Talos released Snort coverage for CVE-2020-5902, a remote code execution vulnerability in F5 BIG-IP's configuration interface that F5 disclosed over the weekend with a maximum 10 out of 10 severity score. The rule set includes rule 54462 to protect against exploitation, and users are urged to make their interfaces inaccessible to the internet and patch as soon as possible.
What you should know: A 10-out-of-10 remote code execution flaw sits in BIG-IP, a product used to shape web traffic and control access gateways, so an exposed configuration interface is a direct path into the network core.
Read the original at Cisco Talos ↗
- Topics
- Detection & Response
- Mentions
- CVE-2020-5902
- Related
- CVE-2020-5902: F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021Attackers target Ukraine using GoMet backdoor Cyber Risks ·