CVE-2020-5902
CRITICAL
9,8
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
HIGH
10,0
Source: [email protected]
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: complete
Integrity: complete
Availability: complete
Description
AI Translation Available
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,9443
Percentile
1,0th
Updated
EPSS Score Trend (Last 90 Days)
22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
StableCommon Consequences
Security Scopes Affected:
Integrity
Confidentiality
Availability
Potential Impacts:
Execute Unauthorized Code Or Commands
Modify Files Or Directories
Read Files Or Directories
Dos: Crash, Exit, Or Restart
Applicable Platforms
Technologies:
AI/ML
Exploit
BIG-IP 15.0.0 < 15.1.0.3 / 14.1.0 < 14.1.2.5 …
BIG-IP 15.0.0 < 15.1.0.3 / 14.1.0 < 14.1.2.5 / 13.1.0 < 13.1.3.3 / 12.1.0 < 12.1.5.1 / 11.6.1 < 11.6.5.1 - Traffic Management User Interface …
View Exploit Code →
Exploit
BIG-IP 15.0.0 < 15.1.0.3 / 14.1.0 < 14.1.2.5 …
BIG-IP 15.0.0 < 15.1.0.3 / 14.1.0 < 14.1.2.5 / 13.1.0 < 13.1.3.3 / 12.1.0 < 12.1.5.1 / 11.6.1 < 11.6.5.1 - Traffic Management User Interface …
View Exploit Code →
Exploit
F5 Big-IP 13.1.3 Build 0.0.6 - Local File …
F5 Big-IP 13.1.3 Build 0.0.6 - Local File Inclusion
View Exploit Code →
Application
Big-Ip Analytics by F5
Version Range Affected
From
12.1.0
(inclusive)
To
12.1.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Advanced Firewall Manager by F5
Version Range Affected
From
14.1.0
(inclusive)
To
14.1.2.6
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Domain Name System by F5
Version Range Affected
From
15.1.0
(inclusive)
To
15.1.0.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Ssl Orchestrator by F5
Version Range Affected
From
15.1.0
(inclusive)
To
15.1.0.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Application Acceleration Manager by F5
Version Range Affected
From
11.6.1
(inclusive)
To
11.6.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Access Policy Manager by F5
Version Range Affected
From
15.1.0
(inclusive)
To
15.1.0.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Ddos Hybrid Defender by F5
Version Range Affected
From
15.1.0
(inclusive)
To
15.1.0.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Policy Enforcement Manager by F5
Version Range Affected
From
12.1.0
(inclusive)
To
12.1.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Policy Enforcement Manager by F5
Version Range Affected
From
13.1.0
(inclusive)
To
13.1.3.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Local Traffic Manager by F5
Version Range Affected
From
14.1.0
(inclusive)
To
14.1.2.6
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Link Controller by F5
Version Range Affected
From
14.1.0
(inclusive)
To
14.1.2.6
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Analytics by F5
Version Range Affected
From
11.6.1
(inclusive)
To
11.6.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Global Traffic Manager by F5
Version Range Affected
From
12.1.0
(inclusive)
To
12.1.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Analytics by F5
Version Range Affected
From
14.1.0
(inclusive)
To
14.1.2.6
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Domain Name System by F5
Version Range Affected
From
14.1.0
(inclusive)
To
14.1.2.6
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Ddos Hybrid Defender by F5
Version Range Affected
From
12.1.0
(inclusive)
To
12.1.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Access Policy Manager by F5
Version Range Affected
From
14.1.0
(inclusive)
To
14.1.2.6
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Advanced Firewall Manager by F5
Version Range Affected
From
12.1.0
(inclusive)
To
12.1.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Fraud Protection Service by F5
Version Range Affected
From
15.1.0
(inclusive)
To
15.1.0.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Advanced Firewall Manager by F5
Version Range Affected
From
13.1.0
(inclusive)
To
13.1.3.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Ddos Hybrid Defender by F5
Version Range Affected
From
13.1.0
(inclusive)
To
13.1.3.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Link Controller by F5
Version Range Affected
From
12.1.0
(inclusive)
To
12.1.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Global Traffic Manager by F5
Version Range Affected
From
13.1.0
(inclusive)
To
13.1.3.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Global Traffic Manager by F5
Version Range Affected
From
15.0.0
(inclusive)
To
15.0.1.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Application Security Manager by F5
Version Range Affected
From
13.1.0
(inclusive)
To
13.1.3.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Ssl Orchestrator by F5
Version Range Affected
From
15.0.0
(inclusive)
To
15.0.1.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Ssl Orchestrator by F5
Version Range Affected
From
11.6.1
(inclusive)
To
11.6.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Local Traffic Manager by F5
Version Range Affected
From
11.6.1
(inclusive)
To
11.6.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Fraud Protection Service by F5
Version Range Affected
From
14.1.0
(inclusive)
To
14.1.2.6
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Ssl Orchestrator by F5
Version Range Affected
From
13.1.0
(inclusive)
To
13.1.3.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Access Policy Manager by F5
Version Range Affected
From
13.1.0
(inclusive)
To
13.1.3.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Advanced Firewall Manager by F5
Version Range Affected
From
15.0.0
(inclusive)
To
15.0.1.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Application Acceleration Manager by F5
Version Range Affected
From
12.1.0
(inclusive)
To
12.1.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Ddos Hybrid Defender by F5
Version Range Affected
From
15.0.0
(inclusive)
To
15.0.1.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Application Acceleration Manager by F5
Version Range Affected
From
14.1.0
(inclusive)
To
14.1.2.6
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Access Policy Manager by F5
Version Range Affected
From
15.0.0
(inclusive)
To
15.0.1.4
(inclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Policy Enforcement Manager by F5
Version Range Affected
From
14.1.0
(inclusive)
To
14.1.2.6
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Advanced Web Application Firewall by F5
Version Range Affected
From
12.1.0
(inclusive)
To
12.1.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Ssl Orchestrator by F5
Version Range Affected
From
14.1.0
(inclusive)
To
14.1.2.6
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Advanced Web Application Firewall by F5
Version Range Affected
From
14.1.0
(inclusive)
To
14.1.2.6
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Domain Name System by F5
Version Range Affected
From
12.1.0
(inclusive)
To
12.1.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Policy Enforcement Manager by F5
Version Range Affected
From
11.6.1
(inclusive)
To
11.6.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Policy Enforcement Manager by F5
Version Range Affected
From
15.1.0
(inclusive)
To
15.1.0.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Advanced Web Application Firewall by F5
Version Range Affected
From
15.0.0
(inclusive)
To
15.0.1.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Application Security Manager by F5
Version Range Affected
From
11.6.1
(inclusive)
To
11.6.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Application Security Manager by F5
Version Range Affected
From
12.1.0
(inclusive)
To
12.1.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Fraud Protection Service by F5
Version Range Affected
From
15.0.0
(inclusive)
To
15.0.1.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Fraud Protection Service by F5
Version Range Affected
From
11.6.1
(inclusive)
To
11.6.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Analytics by F5
Version Range Affected
From
15.0.0
(inclusive)
To
15.0.1.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Link Controller by F5
Version Range Affected
From
11.6.1
(inclusive)
To
11.6.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Link Controller by F5
Version Range Affected
From
13.1.0
(inclusive)
To
13.1.3.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Application Acceleration Manager by F5
Version Range Affected
From
15.0.0
(inclusive)
To
15.0.1.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Fraud Protection Service by F5
Version Range Affected
From
12.1.0
(inclusive)
To
12.1.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Global Traffic Manager by F5
Version Range Affected
From
11.6.1
(inclusive)
To
11.6.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Application Security Manager by F5
Version Range Affected
From
15.1.0
(inclusive)
To
15.1.0.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Global Traffic Manager by F5
Version Range Affected
From
14.1.0
(inclusive)
To
14.1.2.6
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Application Acceleration Manager by F5
Version Range Affected
From
15.1.0
(inclusive)
To
15.1.0.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Local Traffic Manager by F5
Version Range Affected
From
12.1.0
(inclusive)
To
12.1.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Global Traffic Manager by F5
Version Range Affected
From
15.1.0
(inclusive)
To
15.1.0.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Local Traffic Manager by F5
Version Range Affected
From
15.1.0
(inclusive)
To
15.1.0.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Advanced Firewall Manager by F5
Version Range Affected
From
11.6.1
(inclusive)
To
11.6.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Ssl Orchestrator by F5
Version Range Affected
From
12.1.0
(inclusive)
To
12.1.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Application Acceleration Manager by F5
Version Range Affected
From
13.1.0
(inclusive)
To
13.1.3.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Advanced Web Application Firewall by F5
Version Range Affected
From
15.1.0
(inclusive)
To
15.1.0.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Analytics by F5
Version Range Affected
From
15.1.0
(inclusive)
To
15.1.0.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Application Security Manager by F5
Version Range Affected
From
14.1.0
(inclusive)
To
14.1.2.6
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Policy Enforcement Manager by F5
Version Range Affected
From
15.0.0
(inclusive)
To
15.0.1.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Access Policy Manager by F5
Version Range Affected
From
11.6.1
(inclusive)
To
11.6.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Domain Name System by F5
Version Range Affected
From
13.1.0
(inclusive)
To
13.1.3.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Link Controller by F5
Version Range Affected
From
15.1.0
(inclusive)
To
15.1.0.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Local Traffic Manager by F5
Version Range Affected
From
15.0.0
(inclusive)
To
15.0.1.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Link Controller by F5
Version Range Affected
From
15.0.0
(inclusive)
To
15.0.1.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Advanced Web Application Firewall by F5
Version Range Affected
From
11.6.1
(inclusive)
To
11.6.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Application Security Manager by F5
Version Range Affected
From
15.0.0
(inclusive)
To
15.0.1.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Domain Name System by F5
Version Range Affected
From
15.0.0
(inclusive)
To
15.0.1.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Advanced Web Application Firewall by F5
Version Range Affected
From
13.1.0
(inclusive)
To
13.1.3.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Ddos Hybrid Defender by F5
Version Range Affected
From
11.6.1
(inclusive)
To
11.6.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Access Policy Manager by F5
Version Range Affected
From
12.1.0
(inclusive)
To
12.1.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Advanced Firewall Manager by F5
Version Range Affected
From
15.1.0
(inclusive)
To
15.1.0.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Analytics by F5
Version Range Affected
From
13.1.0
(inclusive)
To
13.1.3.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Domain Name System by F5
Version Range Affected
From
11.6.1
(inclusive)
To
11.6.5.2
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Local Traffic Manager by F5
Version Range Affected
From
13.1.0
(inclusive)
To
13.1.3.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Ddos Hybrid Defender by F5
Version Range Affected
From
14.1.0
(inclusive)
To
14.1.2.6
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Big-Ip Fraud Protection Service by F5
Version Range Affected
From
13.1.0
(inclusive)
To
13.1.3.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020…
http://packetstormsecurity.com/files/158333/BIG-IP-TMUI-Remote-Code-Execution.h…
http://packetstormsecurity.com/files/158334/BIG-IP-TMUI-Remote-Code-Execution.h…
http://packetstormsecurity.com/files/158366/F5-BIG-IP-TMUI-Directory-Traversal-…
http://packetstormsecurity.com/files/158414/Checker-CVE-2020-5902.html
http://packetstormsecurity.com/files/158581/F5-Big-IP-13.1.3-Build-0.0.6-Local-…
http://packetstormsecurity.com/files/175671/F5-BIG-IP-TMUI-Directory-Traversal-…
https://badpackets.net/over-3000-f5-big-ip-endpoints-vulnerable-to-cve-2020-590…
https://github.com/Critical-Start/Team-Ares/tree/master/CVE-2020-5902
https://support.f5.com/csp/article/K52145254
https://swarm.ptsecurity.com/rce-in-f5-big-ip/
https://www.criticalstart.com/f5-big-ip-remote-code-execution-exploit/
https://www.kb.cert.org/vuls/id/290915
http://packetstormsecurity.com/files/158333/BIG-IP-TMUI-Remote-Code-Execution.h…
http://packetstormsecurity.com/files/158334/BIG-IP-TMUI-Remote-Code-Execution.h…
http://packetstormsecurity.com/files/158366/F5-BIG-IP-TMUI-Directory-Traversal-…
http://packetstormsecurity.com/files/158414/Checker-CVE-2020-5902.html
http://packetstormsecurity.com/files/158581/F5-Big-IP-13.1.3-Build-0.0.6-Local-…
http://packetstormsecurity.com/files/175671/F5-BIG-IP-TMUI-Directory-Traversal-…
https://badpackets.net/over-3000-f5-big-ip-endpoints-vulnerable-to-cve-2020-590…
https://github.com/Critical-Start/Team-Ares/tree/master/CVE-2020-5902
https://support.f5.com/csp/article/K52145254
https://swarm.ptsecurity.com/rce-in-f5-big-ip/
https://www.criticalstart.com/f5-big-ip-remote-code-execution-exploit/
https://www.kb.cert.org/vuls/id/290915