Multiple F5 Products TMOS Shell Privilege Gain Vulnerability

🗓️ 02 May 2018 00:00:00Reported by China National Vulnerability DatabaseType

cnvd

cnvd🔗 www.cnvd.org.cn👁 2 Views

TMOS Shell vulnerability in multiple F5 products could allow unauthorized file system access.

Reporter	Title	Published	Views	Family All 8
CVE	CVE-2018-5520	2 May 201813:00	–	cve
Cvelist	CVE-2018-5520	2 May 201813:00	–	cvelist
EUVD	EUVD-2018-17289	7 Oct 202500:30	–	euvd
F5 Networks	K02043709: Appliance mode tmsh access vulnerability CVE-2018-5520	21 Feb 202318:46	–	f5
Tenable Nessus	F5 Networks BIG-IP : Appliance mode tmsh access vulnerability (K02043709)	2 Nov 201800:00	–	nessus
NVD	CVE-2018-5520	2 May 201813:29	–	nvd
OSV	CVE-2018-5520	2 May 201813:29	–	osv
Prion	Design/Logic Flaw	2 May 201813:29	–	prion

Vulners

Node

f5 big-ip_ltmRange12.1.0–12.1.3

OR

f5 big-ip_ltmRange13.0.0–13.1.0.5

OR

f5 big-ip_afmRange12.1.0–12.1.3

OR

f5 big-ip_afmRange13.0.0–13.1.0.5

OR

f5 big-ip_analyticsRange12.1.0–12.1.3

OR

f5 big-ip_analyticsRange13.0.0–13.1.0.5

OR

f5 big-ip_apmRange12.1.0–12.1.3

OR

f5 big-ip_apmRange13.0.0–13.1.0.5

OR

f5 big-ip_asmRange12.1.0–12.1.3

OR

f5 big-ip_asmRange13.0.0–13.1.0.5

OR

f5 big-ip_dnsRange12.1.0–12.1.3

OR

f5 big-ip_dnsRange13.0.0–13.1.0.5

OR

f5 big-ip_edge_gatewayRange12.1.0–12.1.3

OR

f5 big-ip_edge_gatewayRange13.0.0–13.1.0.5

OR

f5 big-ip_link_controllerRange12.1.0–12.1.3

OR

f5 big-ip_link_controllerRange13.0.0–13.1.0.5

OR

f5 big-ip_pemRange12.1.0–12.1.3

OR

f5 big-ip_pemRange13.0.0–13.1.0.5

OR

f5 big-ip_webacceleratorRange12.1.0–12.1.3

OR

f5 big-ip_webacceleratorRange13.0.0–13.1.0.5

Source	Link
support	www.support.f5.com/csp/article/K02043709https://www.securitytracker.com/id/1040798

23 May 2018 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 23.5

CVSS 34.4

EPSS0.01054

five products tmos shell file system access privilege gain local traffic manager security vulnerability