F5 iControl REST和F5 BIG-IP TMOS Shell 操作系统命令注入漏洞

🗓️ 05 Feb 2025 00:00:00Reported by China National Vulnerability Database of Information SecurityType

Authenticated attackers can execute OS commands via injection in F5 iControl REST and TMOS Shell.

Reporter	Title	Published	Views	Family All 17
GithubExploit	Exploit for CVE-2025-20029	1 May 202505:46	–	githubexploit
GithubExploit	Exploit for CVE-2025-20029	23 Feb 202518:36	–	githubexploit
ATTACKERKB	CVE-2025-20029	5 Feb 202518:15	–	attackerkb
BDU FSTEC	The vulnerability of the TMOS Shell configuration tool’s IControl REST interface allows attackers to execute arbitrary commands. This vulnerability relates to the BIG-IP Access Policy Manager, as well as software programs such as BIG-IP Advanced Firewall Manager, BIG-IP Advanced Web Application Firewall, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Application Visibility and Reporting (AVR), BIG-IP Camer-Grade NAT (CGNAT), BIG-IP DDos Hybrid Defender, BIG-IP Domain Name System, BIG-IP Edge Gateway, BIG-IP Fraud Protection Service, BIG-IP Global Traffic Manager, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Inforcement Manager, BIG-IP SSL Orchestrator, BIG-IP Webaccelerator, and BIG-IP WebSafe.	25 Feb 202500:00	–	bdu_fstec
Circl	CVE-2025-20029	5 Feb 202517:37	–	circl
CVE	CVE-2025-20029	5 Feb 202517:31	–	cve
Cvelist	CVE-2025-20029 BIG-IP iControl REST and tmsh vulnerability	5 Feb 202517:31	–	cvelist
F5 Networks	K000148587: BIG-IP iControl REST and tmsh vulnerability CVE-2025-20029	5 Feb 202514:20	–	f5
F5 Networks	K000149540: Quarterly Security Notification (February 2025)	5 Feb 202514:41	–	f5
Tenable Nessus	F5 Networks BIG-IP : BIG-IP iControl REST and tmsh vulnerability (K000148587)	5 Feb 202500:00	–	nessus