CVE-2018-5520

🗓️ 02 May 2018 13:00:00Reported by f5Type

F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.2.1-11.6.3.1 system Appliance mode dig utility unauthorized file system acces

Reporter	Title	Published	Views	Family All 8
CNVD	Multiple F5 Products TMOS Shell Privilege Gain Vulnerability	2 May 201800:00	–	cnvd
Cvelist	CVE-2018-5520	2 May 201813:00	–	cvelist
EUVD	EUVD-2018-17289	7 Oct 202500:30	–	euvd
F5 Networks	K02043709: Appliance mode tmsh access vulnerability CVE-2018-5520	21 Feb 202318:46	–	f5
Tenable Nessus	F5 Networks BIG-IP : Appliance mode tmsh access vulnerability (K02043709)	2 Nov 201800:00	–	nessus
NVD	CVE-2018-5520	2 May 201813:29	–	nvd
OSV	CVE-2018-5520	2 May 201813:29	–	osv
Prion	Design/Logic Flaw	2 May 201813:29	–	prion

NVD

Node

f5 big-ip_local_traffic_managerRange11.2.1–11.6.3

f5 big-ip_local_traffic_managerRange12.1.0–12.1.3

f5 big-ip_local_traffic_managerRange13.0.0–13.1.0

Node

f5 big-ip_application_acceleration_managerRange11.2.1–11.6.3

f5 big-ip_application_acceleration_managerRange12.1.0–12.1.3

f5 big-ip_application_acceleration_managerRange13.0.0–13.1.0

Node

f5 big-ip_advanced_firewall_managerRange11.2.1–11.6.3

f5 big-ip_advanced_firewall_managerRange12.1.0–12.1.3

f5 big-ip_advanced_firewall_managerRange13.0.0–13.1.0

Node

f5 big-ip_analyticsRange11.2.1–11.6.3

f5 big-ip_analyticsRange12.1.0–12.1.3

f5 big-ip_analyticsRange13.0.0–13.1.0

Node

f5 big-ip_access_policy_managerRange11.2.1–11.6.3

f5 big-ip_access_policy_managerRange12.1.0–12.1.3

f5 big-ip_access_policy_managerRange13.0.0–13.1.0

Node

f5 big-ip_application_security_managerRange11.2.1–11.6.3

f5 big-ip_application_security_managerRange12.1.0–12.1.3

f5 big-ip_application_security_managerRange13.0.0–13.1.0

Node

f5 big-ip_edge_gatewayRange11.2.1–11.6.3

f5 big-ip_edge_gatewayRange12.1.0–12.1.3

f5 big-ip_edge_gatewayRange13.0.0–13.1.0

Node

f5 big-ip_global_traffic_managerRange11.2.1–11.6.3

f5 big-ip_global_traffic_managerRange12.1.0–12.1.3

f5 big-ip_global_traffic_managerRange13.0.0–13.1.0

Node

f5 big-ip_link_controllerRange11.2.1–11.6.3

f5 big-ip_link_controllerRange12.1.0–12.1.3

f5 big-ip_link_controllerRange13.0.0–13.1.0

Node

f5 big-ip_policy_enforcement_managerRange11.2.1–11.6.3

f5 big-ip_policy_enforcement_managerRange12.1.0–12.1.3

f5 big-ip_policy_enforcement_managerRange13.0.0–13.1.0

Node

f5 big-ip_webacceleratorRange11.2.1–11.6.3

f5 big-ip_webacceleratorRange12.1.0–12.1.3

f5 big-ip_webacceleratorRange13.0.0–13.1.0

Node

f5 big-ip_websafeRange11.2.1–11.6.3

f5 big-ip_websafeRange12.1.0–12.1.3

f5 big-ip_websafeRange13.0.0–13.1.0

Node

f5 big-ip_domain_name_systemRange11.2.1–11.6.3

f5 big-ip_domain_name_systemRange12.1.0–12.1.3

f5 big-ip_domain_name_systemRange13.0.0–13.1.0

[
  {
    "product": "BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe)",
    "vendor": "F5 Networks, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "13.0.0-13.1.0.5"
      },
      {
        "status": "affected",
        "version": "12.1.0-12.1.3.1"
      },
      {
        "status": "affected",
        "version": "11.2.1-11.6.3.1"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1040798
support	www.support.f5.com/csp/article/K02043709

21 Nov 2024 04:08Current

4.9Medium risk

Vulners AI Score4.9

CVSS 23.5

CVSS 34.4

EPSS0.00189

CWE-863

cve-2018-5520 f5 big-ip tmos shell appliance mode dig utility unauthorized access file system nvd