K02043709: Appliance mode tmsh access vulnerability CVE-2018-5520

🗓️ 21 Feb 2023 18:46:50Reported by f5Type

f5🔗 my.f5.com👁 36 Views

Appliance mode vulnerability allows unauthorized file system acces

Reporter	Title	Published	Views	Family All 8
CNVD	Multiple F5 Products TMOS Shell Privilege Gain Vulnerability	2 May 201800:00	–	cnvd
CVE	CVE-2018-5520	2 May 201813:00	–	cve
Cvelist	CVE-2018-5520	2 May 201813:00	–	cvelist
EUVD	EUVD-2018-17289	7 Oct 202500:30	–	euvd
Tenable Nessus	F5 Networks BIG-IP : Appliance mode tmsh access vulnerability (K02043709)	2 Nov 201800:00	–	nessus
NVD	CVE-2018-5520	2 May 201813:29	–	nvd
OSV	CVE-2018-5520	2 May 201813:29	–	osv
Prion	Design/Logic Flaw	2 May 201813:29	–	prion

Vulners

Node

f5 big-ip_ltmRange<14.0.0

OR

f5 big-ip_aamRange<14.0.0

OR

f5 big-ip_afmRange<14.0.0

OR

f5 big-ip_analyticsRange<14.0.0

OR

f5 big-ip_apmRange<14.0.0

OR

f5 big-ip_asmRange<14.0.0

OR

f5 big-ip_dnsRange<14.0.0

OR

f5 big-ip_edge_gatewayRange<14.0.0

OR

f5 big-ip_gtmRange<14.0.0

OR

f5 big-ip_link_controllerRange<14.0.0

OR

f5 big-ip_pemRange<14.0.0

OR

f5 big-ip_webacceleratorRange<14.0.0

OR

f5 big-ip_websafeRange<14.0.0

OR

f5 big-ip_ltmRange13.1.0–13.1.0.6

OR

f5 big-ip_aamRange13.1.0–13.1.0.6

OR

f5 big-ip_afmRange13.1.0–13.1.0.6

OR

f5 big-ip_analyticsRange13.1.0–13.1.0.6

OR

f5 big-ip_apmRange13.1.0–13.1.0.6

OR

f5 big-ip_asmRange13.1.0–13.1.0.6

OR

f5 big-ip_dnsRange13.1.0–13.1.0.6

OR

f5 big-ip_edge_gatewayRange13.1.0–13.1.0.6

OR

f5 big-ip_gtmRange13.1.0–13.1.0.6

OR

f5 big-ip_link_controllerRange13.1.0–13.1.0.6

OR

f5 big-ip_pemRange13.1.0–13.1.0.6

OR

f5 big-ip_webacceleratorRange13.1.0–13.1.0.6

OR

f5 big-ip_websafeRange13.1.0–13.1.0.6

OR

f5 big-ip_ltmRange13.0.0–13.1.0.6

OR

f5 big-ip_aamRange13.0.0–13.1.0.6

OR

f5 big-ip_afmRange13.0.0–13.1.0.6

OR

f5 big-ip_analyticsRange13.0.0–13.1.0.6

OR

f5 big-ip_apmRange13.0.0–13.1.0.6

OR

f5 big-ip_asmRange13.0.0–13.1.0.6

OR

f5 big-ip_dnsRange13.0.0–13.1.0.6

OR

f5 big-ip_edge_gatewayRange13.0.0–13.1.0.6

OR

f5 big-ip_gtmRange13.0.0–13.1.0.6

OR

f5 big-ip_link_controllerRange13.0.0–13.1.0.6

OR

f5 big-ip_pemRange13.0.0–13.1.0.6

OR

f5 big-ip_webacceleratorRange13.0.0–13.1.0.6

OR

f5 big-ip_websafeRange13.0.0–13.1.0.6

OR

f5 big-ip_ltmRange12.1.0–12.1.3

OR

f5 big-ip_aamRange12.1.0–12.1.3

OR

f5 big-ip_afmRange12.1.0–12.1.3

OR

f5 big-ip_analyticsRange12.1.0–12.1.3

OR

f5 big-ip_apmRange12.1.0–12.1.3

OR

f5 big-ip_asmRange12.1.0–12.1.3

OR

f5 big-ip_dnsRange12.1.0–12.1.3

OR

f5 big-ip_edge_gatewayRange12.1.0–12.1.3

OR

f5 big-ip_gtmRange12.1.0–12.1.3

OR

f5 big-ip_link_controllerRange12.1.0–12.1.3

OR

f5 big-ip_pemRange12.1.0–12.1.3

OR

f5 big-ip_webacceleratorRange12.1.0–12.1.3

OR

f5 big-ip_websafeRange12.1.0–12.1.3

OR

f5 big-ip_ltmRange11.2.1–11.6.3

OR

f5 big-ip_aamRange11.2.1–11.6.3

OR

f5 big-ip_afmRange11.2.1–11.6.3

OR

f5 big-ip_analyticsRange11.2.1–11.6.3

OR

f5 big-ip_apmRange11.2.1–11.6.3

OR

f5 big-ip_asmRange11.2.1–11.6.3

OR

f5 big-ip_dnsRange11.2.1–11.6.3

OR

f5 big-ip_edge_gatewayRange11.2.1–11.6.3

OR

f5 big-ip_gtmRange11.2.1–11.6.3

OR

f5 big-ip_link_controllerRange11.2.1–11.6.3

OR

f5 big-ip_pemRange11.2.1–11.6.3

OR

f5 big-ip_webacceleratorRange11.2.1–11.6.3

OR

f5 big-ip_websafeRange11.2.1–11.6.3

21 Feb 2023 18:46Current

4.8Medium risk

Vulners AI Score4.8

CVSS 23.5

CVSS 34.4

EPSS0.00189

appliance mode big-ip tmos shell dig utility unauthorized access file system vulnerability disclosure