K00091341: TMOS Shell privilege escalation vulnerability CVE-2020-5907

🗓️ 21 Feb 2023 19:01:23Reported by f5Type

f5🔗 my.f5.com👁 20 Views

TMOS Shell privilege escalation vulnerability CVE-2020-5907. Authorized user may conduct arbitrary file read/writes via sftp

Reporter	Title	Published	Views	Family All 8
CVE	CVE-2020-5907	1 Jul 202014:43	–	cve
Cvelist	CVE-2020-5907	1 Jul 202014:43	–	cvelist
EUVD	EUVD-2020-27061	7 Oct 202500:30	–	euvd
Tenable Nessus	F5 Networks BIG-IP : TMOS Shell privilege escalation vulnerability (K00091341)	1 Jul 202000:00	–	nessus
NVD	CVE-2020-5907	1 Jul 202015:15	–	nvd
Prion	Code injection	1 Jul 202015:15	–	prion
RedhatCVE	CVE-2020-5907	22 May 202515:39	–	redhatcve
CERT	F5 BIG-IP contains multiple vulnerabilities including unauthenticated remote command execution	8 Jul 202000:00	–	cert

Vulners

Node

f5 big-ip_ltmRange<16.0.0

OR

f5 big-ip_aamRange<16.0.0

OR

f5 big-ip_afmRange<16.0.0

OR

f5 big-ip_analyticsRange<16.0.0

OR

f5 big-ip_apmRange<16.0.0

OR

f5 big-ip_asmRange<16.0.0

OR

f5 big-ip_dnsRange<16.0.0

OR

f5 big-ip_fpsRange<16.0.0

OR

f5 big-ip_gtmRange<16.0.0

OR

f5 big-ip_link_controllerRange<16.0.0

OR

f5 big-ip_pemRange<16.0.0

OR

f5 big-ip_ltmRange15.1.0–15.1.0.4

OR

f5 big-ip_aamRange15.1.0–15.1.0.4

OR

f5 big-ip_afmRange15.1.0–15.1.0.4

OR

f5 big-ip_analyticsRange15.1.0–15.1.0.4

OR

f5 big-ip_apmRange15.1.0–15.1.0.4

OR

f5 big-ip_asmRange15.1.0–15.1.0.4

OR

f5 big-ip_dnsRange15.1.0–15.1.0.4

OR

f5 big-ip_fpsRange15.1.0–15.1.0.4

OR

f5 big-ip_gtmRange15.1.0–15.1.0.4

OR

f5 big-ip_link_controllerRange15.1.0–15.1.0.4

OR

f5 big-ip_pemRange15.1.0–15.1.0.4

OR

f5 big-ip_ltmRange15.0.0–15.1.0.4

OR

f5 big-ip_aamRange15.0.0–15.1.0.4

OR

f5 big-ip_afmRange15.0.0–15.1.0.4

OR

f5 big-ip_analyticsRange15.0.0–15.1.0.4

OR

f5 big-ip_apmRange15.0.0–15.1.0.4

OR

f5 big-ip_asmRange15.0.0–15.1.0.4

OR

f5 big-ip_dnsRange15.0.0–15.1.0.4

OR

f5 big-ip_fpsRange15.0.0–15.1.0.4

OR

f5 big-ip_gtmRange15.0.0–15.1.0.4

OR

f5 big-ip_link_controllerRange15.0.0–15.1.0.4

OR

f5 big-ip_pemRange15.0.0–15.1.0.4

OR

f5 big-ip_ltmRange14.1.0–14.1.2

OR

f5 big-ip_aamRange14.1.0–14.1.2

OR

f5 big-ip_afmRange14.1.0–14.1.2

OR

f5 big-ip_analyticsRange14.1.0–14.1.2

OR

f5 big-ip_apmRange14.1.0–14.1.2

OR

f5 big-ip_asmRange14.1.0–14.1.2

OR

f5 big-ip_dnsRange14.1.0–14.1.2

OR

f5 big-ip_fpsRange14.1.0–14.1.2

OR

f5 big-ip_gtmRange14.1.0–14.1.2

OR

f5 big-ip_link_controllerRange14.1.0–14.1.2

OR

f5 big-ip_pemRange14.1.0–14.1.2

OR

f5 big-ip_ltmRange13.1.0–13.1.3

OR

f5 big-ip_aamRange13.1.0–13.1.3

OR

f5 big-ip_afmRange13.1.0–13.1.3

OR

f5 big-ip_analyticsRange13.1.0–13.1.3

OR

f5 big-ip_apmRange13.1.0–13.1.3

OR

f5 big-ip_asmRange13.1.0–13.1.3

OR

f5 big-ip_dnsRange13.1.0–13.1.3

OR

f5 big-ip_fpsRange13.1.0–13.1.3

OR

f5 big-ip_gtmRange13.1.0–13.1.3

OR

f5 big-ip_link_controllerRange13.1.0–13.1.3

OR

f5 big-ip_pemRange13.1.0–13.1.3

OR

f5 big-ip_ltmRange12.1.0–12.1.5

OR

f5 big-ip_aamRange12.1.0–12.1.5

OR

f5 big-ip_afmRange12.1.0–12.1.5

OR

f5 big-ip_analyticsRange12.1.0–12.1.5

OR

f5 big-ip_apmRange12.1.0–12.1.5

OR

f5 big-ip_asmRange12.1.0–12.1.5

OR

f5 big-ip_dnsRange12.1.0–12.1.5

OR

f5 big-ip_fpsRange12.1.0–12.1.5

OR

f5 big-ip_gtmRange12.1.0–12.1.5

OR

f5 big-ip_link_controllerRange12.1.0–12.1.5

OR

f5 big-ip_pemRange12.1.0–12.1.5

OR

f5 big-ip_ltmRange11.5.2–11.6.5

OR

f5 big-ip_aamRange11.5.2–11.6.5

OR

f5 big-ip_afmRange11.5.2–11.6.5

OR

f5 big-ip_analyticsRange11.5.2–11.6.5

OR

f5 big-ip_apmRange11.5.2–11.6.5

OR

f5 big-ip_asmRange11.5.2–11.6.5

OR

f5 big-ip_dnsRange11.5.2–11.6.5

OR

f5 big-ip_fpsRange11.5.2–11.6.5

OR

f5 big-ip_gtmRange11.5.2–11.6.5

OR

f5 big-ip_link_controllerRange11.5.2–11.6.5

OR

f5 big-ip_pemRange11.5.2–11.6.5

21 Feb 2023 19:01Current

7.3High risk

Vulners AI Score7.3

CVSS 26

CVSS 3.17.2

EPSS0.00358

tmos shell privilege escalation cve-2020-5907 arbitrary file sftp root access