F5 BIG-IP Remote Code Execution Vulnerability (CVE-2020-5902) | Qualys
Summary: F5 released updates for CVE-2020-5902, a critical remote code execution flaw in BIG-IP products rated 9.8 on CVSS v3.1 that allows attackers to read files, execute code, or take complete control of vulnerable systems with network access. The vulnerability, discovered by Positive Technologies researcher Mikhail Klyuchnikov, was observed actively exploited in the wild to steal credentials, with more than 1,000 publicly available devices visible on Shodan and a public Metasploit exploit module released.
Key Takeaway: F5's own July 8 advisory said all previously provided mitigations were not completely effective and recommended installing patched versions, while US Cyber Command urged immediate patching of a flaw that affects BIG-IP versions 11.6.x through 15.1.x and is already being used to steal credentials.
Read the original at Qualys Blog ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2020-5902CVE-2020-5903
- Related
- CVE-2020-5902: F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021