The vulnerability of the TMOS Shell configuration tool’s IControl REST interface allows attackers to execute arbitrary commands. This vulnerability relates to the BIG-IP Access Policy Manager, as well as software programs such as BIG-IP Advanced Firewall Manager, BIG-IP Advanced Web Application Firewall, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Application Visibility and Reporting (AVR), BIG-IP Camer-Grade NAT (CGNAT), BIG-IP DDos Hybrid Defender, BIG-IP Domain Name System, BIG-IP Edge Gateway, BIG-IP Fraud Protection Service, BIG-IP Global Traffic Manager, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Inforcement Manager, BIG-IP SSL Orchestrator, BIG-IP Webaccelerator, and BIG-IP WebSafe.

🗓️ 25 Feb 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Vulnerability in TMOS Shell IControl REST allows remote arbitrary command execution across BIG-IP modules.

Reporter	Title	Published	Views	Family All 17
GithubExploit	Exploit for CVE-2025-20029	1 May 202505:46	–	githubexploit
GithubExploit	Exploit for CVE-2025-20029	23 Feb 202518:36	–	githubexploit
ATTACKERKB	CVE-2025-20029	5 Feb 202518:15	–	attackerkb
Circl	CVE-2025-20029	5 Feb 202517:37	–	circl
CNNVD	F5 iControl REST和F5 BIG-IP TMOS Shell 操作系统命令注入漏洞	5 Feb 202500:00	–	cnnvd
CVE	CVE-2025-20029	5 Feb 202517:31	–	cve
Cvelist	CVE-2025-20029 BIG-IP iControl REST and tmsh vulnerability	5 Feb 202517:31	–	cvelist
F5 Networks	K000148587: BIG-IP iControl REST and tmsh vulnerability CVE-2025-20029	5 Feb 202514:20	–	f5
F5 Networks	K000149540: Quarterly Security Notification (February 2025)	5 Feb 202514:41	–	f5
Tenable Nessus	F5 Networks BIG-IP : BIG-IP iControl REST and tmsh vulnerability (K000148587)	5 Feb 202500:00	–	nessus

Vulners

Node

f5_networks,big-ip_access_policy_managerRange<17.2.1

f5_networks,big-ip_access_policy_managerRange<16.1.5.2

f5_networks,big-ip_access_policy_managerRange<15.1.10.6

f5_networks,big-ip_advanced_firewall_managerRange<17.1.2.1

f5_networks,big-ip_advanced_firewall_managerRange<16.1.5.2

f5_networks,big-ip_advanced_firewall_managerRange<15.1.10.6

f5_networks,big-ip_advanced_web_application_firewallRange<17.1.2.1

f5_networks,big-ip_advanced_web_application_firewallRange<16.1.5.2

f5_networks,big-ip_advanced_web_application_firewallRange<15.1.10.6

f5_networks,big-ip_analyticsRange<17.1.2.1

f5_networks,big-ip_analyticsRange<16.1.5.2

f5_networks,big-ip_analyticsRange<15.1.10.6

f5_networks,big-ip_application_acceleration_managerRange<17.1.2.1

f5_networks,big-ip_application_acceleration_managerRange<16.1.5.2

f5_networks,big-ip_application_acceleration_managerRange<15.1.10.6

f5_networks,big-ip_application_security_managerRange<17.1.2.1

f5_networks,big-ip_application_security_managerRange<16.1.5.2

f5_networks,big-ip_application_security_managerRange<15.1.10.6

f5_networks,big-ip_application_visibility_and_reporting_(avr)Range<17.1.2.1

f5_networks,big-ip_application_visibility_and_reporting_(avr)Range<16.1.5.2

f5_networks,big-ip_application_visibility_and_reporting_(avr)Range<15.1.10.6

f5_networks,big-ip_carrier-grade_nat_(cgnat)Range<17.1.2.1

f5_networks,big-ip_carrier-grade_nat_(cgnat)Range<16.1.5.2

f5_networks,big-ip_carrier-grade_nat_(cgnat)Range<15.1.10.6

f5_networks,big-ip_ddos_hybrid_defenderRange<17.1.2.1

f5_networks,big-ip_ddos_hybrid_defenderRange<16.1.5.2

f5_networks,big-ip_ddos_hybrid_defenderRange<15.1.10.6

f5_networks,big-ip_domain_name_systemRange<17.1.2.1

f5_networks,big-ip_domain_name_systemRange<16.1.5.2

f5_networks,big-ip_domain_name_systemRange<15.1.10.6

f5_networks,big-ip_edge_gatewayRange<17.1.2.1

f5_networks,big-ip_edge_gatewayRange<16.1.5.2

f5_networks,big-ip_edge_gatewayRange<15.1.10.6

f5_networks,big-ip_fraud_protection_serviceRange<17.1.2.1

f5_networks,big-ip_fraud_protection_serviceRange<16.1.5.2

f5_networks,big-ip_fraud_protection_serviceRange<15.1.10.6

f5_networks,big-ip_global_traffic_managerRange<17.1.2.1

f5_networks,big-ip_global_traffic_managerRange<16.1.5.2

f5_networks,big-ip_global_traffic_managerRange<15.1.10.6

f5_networks,big-ip_link_controllerRange<17.1.2.1

f5_networks,big-ip_link_controllerRange<16.1.5.2

f5_networks,big-ip_link_controllerRange<15.1.10.6

f5_networks,big-ip_local_traffic_managerRange<17.1.2.1

f5_networks,big-ip_local_traffic_managerRange<16.1.5.2

f5_networks,big-ip_local_traffic_managerRange<15.1.10.6

f5_networks,big-ip_policy_enforcement_managerRange<17.1.2.1

f5_networks,big-ip_policy_enforcement_managerRange<16.1.5.2

f5_networks,big-ip_policy_enforcement_managerRange<15.1.10.6

f5_networks,big-ip_ssl_orchestratorRange<17.1.2.1

f5_networks,big-ip_ssl_orchestratorRange<16.1.5.2

f5_networks,big-ip_ssl_orchestratorRange<15.1.10.6

f5_networks,big-ip_webacceleratorRange<17.1.2.1

f5_networks,big-ip_webacceleratorRange<16.1.5.2

f5_networks,big-ip_webacceleratorRange<15.1.10.6

f5_networks,big-ip_websafeRange<17.1.2.1

f5_networks,big-ip_websafeRange<16.1.5.2

f5_networks,big-ip_websafeRange<15.1.10.6

Source	Link
my	www.my.f5.com/manage/s/article/K000148587
github	www.github.com/mbadanoiu/CVE-2025-20029
github	www.github.com/mbadanoiu/CVE-2025-20029/blob/main/F5%20-%20CVE-2025-20029.pdf
web	www.web.nvd.nist.gov/view/vuln/detail

25 Feb 2025 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 38.8

CVSS 29

EPSS0.66177