Exploit for CVE-2025-20029

🗓️ 01 May 2025 05:46:42Reported by schoi1337Type

githubexploit

githubexploit🔗 github.com👁 632 Views

Docker-based simulation for CVE-2025-20029 command injection vulnerability exploitation.

Reporter	Title	Published	Views	Family All 17
ATTACKERKB	CVE-2025-20029	5 Feb 202518:15	–	attackerkb
BDU FSTEC	The vulnerability of the TMOS Shell configuration tool’s IControl REST interface allows attackers to execute arbitrary commands. This vulnerability relates to the BIG-IP Access Policy Manager, as well as software programs such as BIG-IP Advanced Firewall Manager, BIG-IP Advanced Web Application Firewall, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Application Visibility and Reporting (AVR), BIG-IP Camer-Grade NAT (CGNAT), BIG-IP DDos Hybrid Defender, BIG-IP Domain Name System, BIG-IP Edge Gateway, BIG-IP Fraud Protection Service, BIG-IP Global Traffic Manager, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Inforcement Manager, BIG-IP SSL Orchestrator, BIG-IP Webaccelerator, and BIG-IP WebSafe.	25 Feb 202500:00	–	bdu_fstec
Circl	CVE-2025-20029	5 Feb 202517:37	–	circl
CNNVD	F5 iControl REST和F5 BIG-IP TMOS Shell 操作系统命令注入漏洞	5 Feb 202500:00	–	cnnvd
CVE	CVE-2025-20029	5 Feb 202517:31	–	cve
Cvelist	CVE-2025-20029 BIG-IP iControl REST and tmsh vulnerability	5 Feb 202517:31	–	cvelist
GithubExploit	Exploit for CVE-2025-20029	23 Feb 202518:36	–	githubexploit
F5 Networks	K000148587: BIG-IP iControl REST and tmsh vulnerability CVE-2025-20029	5 Feb 202514:20	–	f5
F5 Networks	K000149540: Quarterly Security Notification (February 2025)	5 Feb 202514:41	–	f5
Tenable Nessus	F5 Networks BIG-IP : BIG-IP iControl REST and tmsh vulnerability (K000148587)	5 Feb 202500:00	–	nessus

10 May 2025 22:32Current

9.2High risk

Vulners AI Score9.2

CVSS 48.7

CVSS 3.18.8

EPSS0.0707

SSVC

cve vulnerability simulation command injection docker environment remote code execution security testing.