vendor:
Big-IP
by:
N/A
9.8
CVSS
CRITICAL
Remote Code Execution (RCE) and File Read
78
CWE
Product Name: Big-IP
Affected Version From: 11.6.1
Affected Version To: 13.1.0
Patch Exists: YES
Related CWE: CVE-2020-5902
CPE: a:f5:big-ip
Other Scripts:
N/A
Platforms Tested: Windows, Linux, Mac
2020
RCE and File Read
This exploit allows an attacker to execute arbitrary code on the F5 Big-IP system and read files from the system. The exploit is achieved by sending a maliciously crafted HTTP request to the F5 Big-IP system, which contains a command to execute arbitrary code or a file read command.
Mitigation:
F5 has released a security advisory and patches to address this vulnerability.
