EUVD-2018-17292

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

F5 BIG-IP versions may not enforce command restrictions for admin users in Traffic Management User Interface.

Reporter	Title	Published	Views	Family All 7
CNVD	F5 BIG-IP Security Restriction Bypass Vulnerability	1 Jun 201800:00	–	cnvd
CVE	CVE-2018-5523	1 Jun 201814:00	–	cve
Cvelist	CVE-2018-5523	1 Jun 201814:00	–	cvelist
F5 Networks	K50254952: BIG-IP Configuration utility vulnerability CVE-2018-5523	21 Feb 202320:02	–	f5
Tenable Nessus	F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K50254952)	2 Nov 201800:00	–	nessus
NVD	CVE-2018-5523	1 Jun 201814:29	–	nvd
Prion	Command injection	1 Jun 201814:29	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "c51c57f2-1058-372b-aedc-bce4e30e2260",
        "vendor": {
          "name": "F5 Networks, Inc."
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0dcf2abb-5522-35a5-bbab-a29e31dac9aa",
        "product": {
          "name": "Enterprise Manager"
        },
        "product_version": "3.1.1"
      },
      {
        "id": "9c1be4a5-3c85-324e-ba0f-198d9fe2d6f2",
        "product": {
          "name": "BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator)"
        },
        "product_version": "13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, 11.2.1"
      }
    ]
  }
]

Source	Link
support	www.support.f5.com/csp/article/K50254952
securitytracker	www.securitytracker.com/id/1041023
securitytracker	www.securitytracker.com/id/1041022
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7High risk

Vulners AI Score7

CVSS 37.2

CVSS 26.5

EPSS0.00842