CVE-2025-20029-simulation

🗓️ 09 Oct 2026 07:50:38Reported by KitPloitType

kitploit🔗 kitploit.com👁 21 Views

Command injection in F5 BIG-IP iControl REST API via /mgmt/tm/util/bash enables root RCE.

Reporter	Title	Published	Views	Family All 20
GithubExploit	Exploit for CVE-2025-20029	1 May 202505:46	–	githubexploit
GithubExploit	Exploit for CVE-2025-20029	23 Feb 202518:36	–	githubexploit
attackerkb	CVE-2025-20029	5 Feb 202518:15	–	attackerkb
BDU FSTEC	The vulnerability of the TMOS Shell configuration tool’s IControl REST interface allows attackers to execute arbitrary commands. This vulnerability relates to the BIG-IP Access Policy Manager, as well as software programs such as BIG-IP Advanced Firewall Manager, BIG-IP Advanced Web Application Firewall, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Application Visibility and Reporting (AVR), BIG-IP Camer-Grade NAT (CGNAT), BIG-IP DDos Hybrid Defender, BIG-IP Domain Name System, BIG-IP Edge Gateway, BIG-IP Fraud Protection Service, BIG-IP Global Traffic Manager, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Inforcement Manager, BIG-IP SSL Orchestrator, BIG-IP Webaccelerator, and BIG-IP WebSafe.	25 Feb 202500:00	–	bdu_fstec
Circl	CVE-2025-20029	5 Feb 202517:37	–	circl
CNNVD	F5 iControl REST和F5 BIG-IP TMOS Shell 操作系统命令注入漏洞	5 Feb 202500:00	–	cnnvd
CVE	CVE-2025-20029	5 Feb 202517:31	–	cve
Cvelist	CVE-2025-20029 BIG-IP iControl REST and tmsh vulnerability	5 Feb 202517:31	–	cvelist
F5 Networks	K000148587: BIG-IP iControl REST and tmsh vulnerability CVE-2025-20029	5 Feb 202514:20	–	f5
F5 Networks	K000149540: Quarterly Security Notification (February 2025)	5 Feb 202514:41	–	f5

09 Oct 2026 07:50Current

7.4High risk

Vulners AI Score7.4

CVSS 48.7

CVSS 3.18.8

EPSS0.0715

SSVC

F5 BIG-IP command injection iControl REST API remote code execution authenticated bash endpoint