CVE-2025-20029

🗓️ 05 Feb 2025 18:15:29Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 15 Views

Command injection vulnerability in iControl REST and TMOS Shell allows command execution by attackers.

Reporter	Title	Published	Views	Family All 17
GithubExploit	Exploit for CVE-2025-20029	1 May 202505:46	–	githubexploit
GithubExploit	Exploit for CVE-2025-20029	23 Feb 202518:36	–	githubexploit
ATTACKERKB	CVE-2025-20029	5 Feb 202518:15	–	attackerkb
BDU FSTEC	The vulnerability of the TMOS Shell configuration tool’s IControl REST interface allows attackers to execute arbitrary commands. This vulnerability relates to the BIG-IP Access Policy Manager, as well as software programs such as BIG-IP Advanced Firewall Manager, BIG-IP Advanced Web Application Firewall, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Application Visibility and Reporting (AVR), BIG-IP Camer-Grade NAT (CGNAT), BIG-IP DDos Hybrid Defender, BIG-IP Domain Name System, BIG-IP Edge Gateway, BIG-IP Fraud Protection Service, BIG-IP Global Traffic Manager, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Inforcement Manager, BIG-IP SSL Orchestrator, BIG-IP Webaccelerator, and BIG-IP WebSafe.	25 Feb 202500:00	–	bdu_fstec
Circl	CVE-2025-20029	5 Feb 202517:37	–	circl
CNNVD	F5 iControl REST和F5 BIG-IP TMOS Shell 操作系统命令注入漏洞	5 Feb 202500:00	–	cnnvd
CVE	CVE-2025-20029	5 Feb 202517:31	–	cve
Cvelist	CVE-2025-20029 BIG-IP iControl REST and tmsh vulnerability	5 Feb 202517:31	–	cvelist
F5 Networks	K000148587: BIG-IP iControl REST and tmsh vulnerability CVE-2025-20029	5 Feb 202514:20	–	f5
F5 Networks	K000149540: Quarterly Security Notification (February 2025)	5 Feb 202514:41	–	f5

NVD

Node

f5 big-ip_access_policy_managerRange15.1.0–15.1.10.6

OR

f5 big-ip_advanced_firewall_managerRange15.1.0–15.1.10.6

OR

f5 big-ip_advanced_web_application_firewallRange15.1.0–15.1.10.6

OR

f5 big-ip_analyticsRange15.1.0–15.1.10.6

OR

f5 big-ip_application_acceleration_managerRange15.1.0–15.1.10.6

OR

f5 big-ip_application_security_managerRange15.1.0–15.1.10.6

OR

f5 big-ip_application_visibility_and_reportingRange15.1.0–15.1.10.6

OR

f5 big-ip_automation_toolchainRange15.1.0–15.1.10.6

OR

f5 big-ip_carrier-grade_natRange15.1.0–15.1.10.6

OR

f5 big-ip_container_ingress_servicesRange15.1.0–15.1.10.6

OR

f5 big-ip_ddos_hybrid_defenderRange15.1.0–15.1.10.6

OR

f5 big-ip_domain_name_systemRange15.1.0–15.1.10.6

OR

f5 big-ip_edge_gatewayRange15.1.0–15.1.10.6

OR

f5 big-ip_fraud_protection_serviceRange15.1.0–15.1.10.6

OR

f5 big-ip_global_traffic_managerRange15.1.0–15.1.10.6

OR

f5 big-ip_link_controllerRange15.1.0–15.1.10.6

OR

f5 big-ip_local_traffic_managerRange15.1.0–15.1.10.6

OR

f5 big-ip_policy_enforcement_managerRange15.1.0–15.1.10.6

OR

f5 big-ip_ssl_orchestratorRange15.1.0–15.1.10.6

OR

f5 big-ip_webacceleratorRange15.1.0–15.1.10.6

OR

f5 big-ip_websafeRange15.1.0–15.1.10.6

Node

f5 big-ip_access_policy_managerRange16.1.0–16.1.5.2

OR

f5 big-ip_advanced_firewall_managerRange16.1.0–16.1.5.2

OR

f5 big-ip_advanced_web_application_firewallRange16.1.0–16.1.5.2

OR

f5 big-ip_analyticsRange16.1.0–16.1.5.2

OR

f5 big-ip_application_acceleration_managerRange16.1.0–16.1.5.2

OR

f5 big-ip_application_security_managerRange16.1.0–16.1.5.2

OR

f5 big-ip_application_visibility_and_reportingRange16.1.0–16.1.5.2

OR

f5 big-ip_automation_toolchainRange16.1.0–16.1.5.2

OR

f5 big-ip_carrier-grade_natRange16.1.0–16.1.5.2

OR

f5 big-ip_container_ingress_servicesRange16.1.0–16.1.5.2

OR

f5 big-ip_ddos_hybrid_defenderRange16.1.0–16.1.5.2

OR

f5 big-ip_domain_name_systemRange16.1.0–16.1.5.2

OR

f5 big-ip_edge_gatewayRange16.1.0–16.1.5.2

OR

f5 big-ip_fraud_protection_serviceRange16.1.0–16.1.5.2

OR

f5 big-ip_global_traffic_managerRange16.1.0–16.1.5.2

OR

f5 big-ip_link_controllerRange16.1.0–16.1.5.2

OR

f5 big-ip_local_traffic_managerRange16.1.0–16.1.5.2

OR

f5 big-ip_policy_enforcement_managerRange16.1.0–16.1.5.2

OR

f5 big-ip_ssl_orchestratorRange16.1.0–16.1.5.2

OR

f5 big-ip_webacceleratorRange16.1.0–16.1.5.2

OR

f5 big-ip_websafeRange16.1.0–16.1.5.2

Node

f5 big-ip_access_policy_managerRange17.1.0–17.1.2.1

OR

f5 big-ip_advanced_firewall_managerRange17.1.0–17.1.2.1

OR

f5 big-ip_advanced_web_application_firewallRange17.1.0–17.1.2.1

OR

f5 big-ip_analyticsRange17.1.0–17.1.2.1

OR

f5 big-ip_application_acceleration_managerRange17.1.0–17.1.2.1

OR

f5 big-ip_application_security_managerRange17.1.0–17.1.2.1

OR

f5 big-ip_application_visibility_and_reportingRange17.1.0–17.1.2.1

OR

f5 big-ip_automation_toolchainRange17.1.0–17.1.2.1

OR

f5 big-ip_carrier-grade_natRange17.1.0–17.1.2.1

OR

f5 big-ip_container_ingress_servicesRange17.1.0–17.1.2.1

OR

f5 big-ip_ddos_hybrid_defenderRange17.1.0–17.1.2.1

OR

f5 big-ip_domain_name_systemRange17.1.0–17.1.2.1

OR

f5 big-ip_edge_gatewayRange17.1.0–17.1.2.1

OR

f5 big-ip_fraud_protection_serviceRange17.1.0–17.1.2.1

OR

f5 big-ip_global_traffic_managerRange17.1.0–17.1.2.1

OR

f5 big-ip_link_controllerRange17.1.0–17.1.2.1

OR

f5 big-ip_local_traffic_managerRange17.1.0–17.1.2.1

OR

f5 big-ip_policy_enforcement_managerRange17.1.0–17.1.2.1

OR

f5 big-ip_ssl_orchestratorRange17.1.0–17.1.2.1

OR

f5 big-ip_webacceleratorRange17.1.0–17.1.2.1

OR

f5 big-ip_websafeRange17.1.0–17.1.2.1

Source	Link
my	www.my.f5.com/manage/s/article/K000148587

17 Jun 2026 08:40Current

CVSS 48.7

CVSS 3.18.8

EPSS0.07844

cve 2025 20029 command injection icontrol rest tmos shell authenticated attacker arbitrary command