CVE-2025-20029

🗓️ 05 Feb 2025 18:15:29Reported by GoogleType

osv🔗 osv.dev👁 2 Views

CVE-2025-20029: Authenticated attacker can execute arbitrary system commands via injection in iControl REST and BIG-IP TMOS Shell save.

Reporter	Title	Published	Views	Family All 17
GithubExploit	Exploit for CVE-2025-20029	1 May 202505:46	–	githubexploit
GithubExploit	Exploit for CVE-2025-20029	23 Feb 202518:36	–	githubexploit
ATTACKERKB	CVE-2025-20029	5 Feb 202518:15	–	attackerkb
BDU FSTEC	The vulnerability of the TMOS Shell configuration tool’s IControl REST interface allows attackers to execute arbitrary commands. This vulnerability relates to the BIG-IP Access Policy Manager, as well as software programs such as BIG-IP Advanced Firewall Manager, BIG-IP Advanced Web Application Firewall, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Application Visibility and Reporting (AVR), BIG-IP Camer-Grade NAT (CGNAT), BIG-IP DDos Hybrid Defender, BIG-IP Domain Name System, BIG-IP Edge Gateway, BIG-IP Fraud Protection Service, BIG-IP Global Traffic Manager, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Inforcement Manager, BIG-IP SSL Orchestrator, BIG-IP Webaccelerator, and BIG-IP WebSafe.	25 Feb 202500:00	–	bdu_fstec
Circl	CVE-2025-20029	5 Feb 202517:37	–	circl
CNNVD	F5 iControl REST和F5 BIG-IP TMOS Shell 操作系统命令注入漏洞	5 Feb 202500:00	–	cnnvd
CVE	CVE-2025-20029	5 Feb 202517:31	–	cve
Cvelist	CVE-2025-20029 BIG-IP iControl REST and tmsh vulnerability	5 Feb 202517:31	–	cvelist
F5 Networks	K000148587: BIG-IP iControl REST and tmsh vulnerability CVE-2025-20029	5 Feb 202514:20	–	f5
F5 Networks	K000149540: Quarterly Security Notification (February 2025)	5 Feb 202514:41	–	f5