CVE-2020-5902criticalbajo ataqueransomwareCWE-22

CVE-2020-5902: fallo crítico en BIG-IP

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear BIG-IP+ Monitorear BIG-IP

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

100Vexday Risk Score

Corrige ahora. Ella está bajo explotación confirmada por CISA, tiene exploit funcional público y 1 grupo(s) de amenaza la utilizan.

ssvc Actcvss 9.8epss 100%
de la publicación al arma3 días
Publicada en NVD1 jul
1ª PoC+3d
metasploit30 jun
CISA KEV+490d
Quién la explota — 1

Grupos conocidos por explotar esta vulnerabilidad (atribución MITRE ATT&CK).

APT / EstatalBackdoorDiplomacy MITRE ATT&CK
Acción exigida por CISAplazo federal: 2022-05-03

Apply updates per vendor instructions.

En resumen

Una vulnerabilidad crítica en la interfaz de gestión web de F5 BIG-IP permite a atacantes ejecutar código arbitrario en sistemas afectados sin autenticación. Esta falla compromete completamente el dispositivo.

Detalle técnico

CVE-2020-5902 es una vulnerabilidad de RCE pre-autenticación en TMUI de BIG-IP afectando versiones 11.6.1–15.1.0.3, explotable mediante páginas no divulgadas con vector de ataque remoto por red. Permite ejecución de código arbitrario sin credenciales con CVSS 9.8, resultando en compromiso total del sistema.

Resumen generado y traducido por IA a partir de la descripción oficial.

El análisis completo de esta CVE está disponible en portugués →

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
n/a · BIG-IP
PoCs públicas encontradas — 106
exploitdbwww.exploit-db.com/exploits/48643no verificadoexploitdbwww.exploit-db.com/exploits/48642no verificadoexploitdbwww.exploit-db.com/exploits/48711no verificadogithubgithub.com/jas502n/CVE-2020-5902★ 374githubgithub.com/yassineaboukir/CVE-2020-5902★ 70githubgithub.com/theLSA/f5-bigip-rce-cve-2020-5902★ 62githubgithub.com/aqhmal/CVE-2020-5902-Scanner★ 55githubgithub.com/yasserjanah/CVE-2020-5902★ 42githubgithub.com/dunderhay/CVE-2020-5902★ 36githubgithub.com/f5devcentral/cve-2020-5902-ioc-bigip-checker★ 16githubgithub.com/zhzyker/CVE-2020-5902★ 13githubgithub.com/PushpenderIndia/CVE-2020-5902-Scanner★ 12githubgithub.com/ar0dd/CVE-2020-5902★ 12githubgithub.com/lijiaxing1997/CVE-2020-5902-POC-EXP★ 10githubgithub.com/west9b/F5-BIG-IP-POC★ 10githubgithub.com/Al1ex/CVE-2020-5902★ 10githubgithub.com/dwisiswant0/CVE-2020-5902★ 9githubgithub.com/rwincey/CVE-2020-5902-NSE★ 8githubgithub.com/nsflabs/CVE-2020-5902★ 8githubgithub.com/rockmelodies/CVE-2020-5902-rce-gui★ 8githubgithub.com/sv3nbeast/CVE-2020-5902_RCE★ 8githubgithub.com/GovindPalakkal/EvilRip★ 6githubgithub.com/MrCl0wnLab/checker-CVE-2020-5902★ 5githubgithub.com/jiansiting/CVE-2020-5902★ 4githubgithub.com/d4rk007/F5-Big-IP-CVE-2020-5902-mass-exploiter★ 4githubgithub.com/corelight/CVE-2020-5902-F5BigIP★ 4githubgithub.com/34zY/APT-Backpack★ 3githubgithub.com/murataydemir/CVE-2020-5902★ 2githubgithub.com/qiong-qi/CVE-2020-5902-POC★ 2githubgithub.com/DeepSecurity-Pe/GoF5-CVE-2020-5902★ 2githubgithub.com/r0ttenbeef/cve-2020-5902★ 2githubgithub.com/faisalfs10x/F5-BIG-IP-CVE-2020-5902-shodan-scanner★ 2githubgithub.com/z3n70/CVE-2020-5902★ 2githubgithub.com/cybersecurityworks553/scanner-CVE-2020-5902★ 2githubgithub.com/Zinkuth/F5-BIG-IP-CVE-2020-5902★ 1githubgithub.com/renanhsilva/checkvulnCVE20205902★ 1githubgithub.com/JSec1337/RCE-CVE-2020-5902★ 1githubgithub.com/qlkwej/poc-CVE-2020-5902★ 1githubgithub.com/0xAbdullah/CVE-2020-5902★ 1githubgithub.com/halencarjunior/f5scan★ 1githubgithub.com/haisenberg/CVE-2020-5902★ 1githubgithub.com/amitlttwo/CVE-2020-5902★ 1githubgithub.com/jinnywc/CVE-2020-5902★ 1githubgithub.com/yora1928/cve-2020-5902★ 1githubgithub.com/Shu1L/CVE-2020-5902-fofa-scan★ 1githubgithub.com/flyopenair/CVE-2020-5902★ 0githubgithub.com/Any3ite/CVE-2020-5902-F5BIG★ 0githubgithub.com/ajdumanhug/CVE-2020-5902★ 0githubgithub.com/GoodiesHQ/F5-Patch★ 0githubgithub.com/cristiano-corrado/f5_scanner★ 0githubgithub.com/momika233/cve-2020-5902★ 0githubgithub.com/ashrafzaryouh/CVE-2020-5902★ 0githubgithub.com/TheCyberViking/CVE-2020-5902-Vuln-Checker★ 0githubgithub.com/DevRafaelprogrammer/F5-BIG-IP★ 0githubgithub.com/k3nundrum/CVE-2020-5902★ 0githubgithub.com/superzerosec/cve-2020-5902★ 0githubgithub.com/ludy-dev/BIG-IP-F5-TMUI-RCE-Vulnerability★ 0githubgithub.com/freeFV/CVE-2020-5902-fofa-scan★ 0githubgithub.com/0xBlackash/CVE-2020-5902★ 0githubgithub.com/dnerzker/CVE-2020-5902★ 0githubgithub.com/inho28/CVE-2020-5902-F5-BIGIP★ 0vulncheckvulncheck.com/xdb/cc8951c30e19no verificadovulncheckvulncheck.com/xdb/803d0da56727no verificadocve_referencepacketstormsecurity.com/files/158333/BIG-IP-TMUI-Remote-Code-Execution.htmlno verificadovulncheckvulncheck.com/xdb/49a09a65578fno verificadovulncheckvulncheck.com/xdb/d2deaeca3c8dno verificadovulncheckvulncheck.com/xdb/9b34669e9e6bno verificadovulncheckvulncheck.com/xdb/d6c5c4d13a05no verificadovulncheckvulncheck.com/xdb/84da9e97c9d8no verificadovulncheckvulncheck.com/xdb/f4a6551a3d25no verificadovulncheckvulncheck.com/xdb/cb20275ece2fno verificadovulncheckvulncheck.com/xdb/015b4ecd80f4no verificadovulncheckvulncheck.com/xdb/83a6db79a08bno verificadovulncheckvulncheck.com/xdb/215e30ad1ec1no verificadovulncheckvulncheck.com/xdb/5965f23f2c23no verificadovulncheckvulncheck.com/xdb/f74eaaf672bcno verificadovulncheckvulncheck.com/xdb/88f1fcaeb598no verificadovulncheckvulncheck.com/xdb/a8f50138be81no verificadovulncheckvulncheck.com/xdb/ee5ad494cf44no verificadovulncheckvulncheck.com/xdb/2f35578b6a4eno verificadovulncheckvulncheck.com/xdb/d13ebff2714eno verificadovulncheckvulncheck.com/xdb/aaa51d1dde07no verificadovulncheckvulncheck.com/xdb/3d3c1efc21d6no verificadovulncheckvulncheck.com/xdb/c9200a88cc26no verificadovulncheckvulncheck.com/xdb/56bfabceae4ano verificadovulncheckvulncheck.com/xdb/9d229282dfa7no verificadovulncheckvulncheck.com/xdb/80de95eed85cno verificadovulncheckvulncheck.com/xdb/ad3e875990f5no verificadovulncheckvulncheck.com/xdb/1a0d5e33fc45no verificadovulncheckvulncheck.com/xdb/73f9e787074dno verificadovulncheckvulncheck.com/xdb/86fe209dce52no verificadovulncheckvulncheck.com/xdb/5283a75d948bno verificadovulncheckvulncheck.com/xdb/9fa6bc3af413no verificadovulncheckvulncheck.com/xdb/7436903b93b3no verificadovulncheckvulncheck.com/xdb/8221dd68e259no verificadovulncheckvulncheck.com/xdb/5e821a582ff3no verificadovulncheckvulncheck.com/xdb/80f18532fc05no verificadovulncheckvulncheck.com/xdb/0f0c474655e0no verificadocve_referencepacketstormsecurity.com/files/158334/BIG-IP-TMUI-Remote-Code-Execution.htmlno verificadocve_referencepacketstormsecurity.com/files/158366/F5-BIG-IP-TMUI-Directory-Traversal-File-Upload-Code-Execution.htmlno verificadocve_referencepacketstormsecurity.com/files/158414/Checker-CVE-2020-5902.htmlno verificadovulncheckvulncheck.com/xdb/04c5c37985c6no verificadocve_referencepacketstormsecurity.com/files/158581/F5-Big-IP-13.1.3-Build-0.0.6-Local-File-Inclusion.htmlno verificadovulncheckvulncheck.com/xdb/7a74e348d282no verificadovulncheckvulncheck.com/xdb/c19b970b5d78no verificadocve_referencepacketstormsecurity.com/files/175671/F5-BIG-IP-TMUI-Directory-Traversal-File-Upload-Code-Execution.htmlno verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.