Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2020-5902

Description

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages.

POC

Reference

- http://packetstormsecurity.com/files/158333/BIG-IP-TMUI-Remote-Code-Execution.html

- http://packetstormsecurity.com/files/158334/BIG-IP-TMUI-Remote-Code-Execution.html

- http://packetstormsecurity.com/files/158366/F5-BIG-IP-TMUI-Directory-Traversal-File-Upload-Code-Execution.html

- http://packetstormsecurity.com/files/158414/Checker-CVE-2020-5902.html

- http://packetstormsecurity.com/files/158581/F5-Big-IP-13.1.3-Build-0.0.6-Local-File-Inclusion.html

- http://packetstormsecurity.com/files/175671/F5-BIG-IP-TMUI-Directory-Traversal-File-Upload-Code-Execution.html

- https://badpackets.net/over-3000-f5-big-ip-endpoints-vulnerable-to-cve-2020-5902/

- https://github.com/Critical-Start/Team-Ares/tree/master/CVE-2020-5902

- https://swarm.ptsecurity.com/rce-in-f5-big-ip/

- https://www.criticalstart.com/f5-big-ip-remote-code-execution-exploit/

Github

- https://github.com/0day404/vulnerability-poc

- https://github.com/0x783kb/Security-operation-book

- https://github.com/0xAbdullah/CVE-2020-5902

- https://github.com/0xMarcio/cve

- https://github.com/0xMrNiko/Awesome-Red-Teaming

- https://github.com/0xPugal/One-Liners

- https://github.com/0xPugazh/One-Liners

- https://github.com/0xT11/CVE-POC

- https://github.com/0xfoysal/Tools

- https://github.com/0xlittleboy/One-Liner-Scripts

- https://github.com/0xlittleboy/One-Liners

- https://github.com/15866095848/15866095848

- https://github.com/189569400/Meppo

- https://github.com/20142995/nuclei-templates

- https://github.com/20142995/pocsuite3

- https://github.com/20142995/sectool

- https://github.com/34zY/APT-Backpack

- https://github.com/5l1v3r1/CVE-2020-5902-Mass

- https://github.com/ARPSyndicate/cve-scores

- https://github.com/ARPSyndicate/cvemon

- https://github.com/ARPSyndicate/kenzer-templates

- https://github.com/Al1ex/CVE-2020-5902

- https://github.com/Amar224/Pentest-Tools

- https://github.com/AnonVulc/Pentest-Tools

- https://github.com/Any3ite/CVE-2020-5902-F5BIG

- https://github.com/ArrestX/--POC

- https://github.com/Astrogeorgeonethree/Starred

- https://github.com/Astrogeorgeonethree/Starred2

- https://github.com/Atem1988/Starred

- https://github.com/BLACKHAT-SSG/Awesome-HTTPRequestSmuggling

- https://github.com/BitTheByte/BitTraversal

- https://github.com/CLincat/vulcat

- https://github.com/CVEDB/PoC-List

- https://github.com/CVEDB/awesome-cve-repo

- https://github.com/CVEDB/top

- https://github.com/ChHsiching/GitHub-Chinese-Top-Charts

- https://github.com/CharonDefalt/F5-BIG-IP-TMUI-RCE-

- https://github.com/CnHack3r/Penetration_PoC

- https://github.com/Coldplay1517/Middleware-Vulnerability-detection-master

- https://github.com/DinoBytes/RVASec-2024-Consumer-Routers-Still-Suck

- https://github.com/EchoGin404/-

- https://github.com/EchoGin404/gongkaishouji

- https://github.com/ElcapitanoO7x/bugbounty-Tips

- https://github.com/Elsfa7-110/Elsfa7110-Oneliner-bughunting

- https://github.com/Elsfa7-110/kenzer-templates

- https://github.com/EmadYaY/BugBountys

- https://github.com/EvilAnne/2020-Read-article

- https://github.com/F5Networks/terraform-aws-bigip-module

- https://github.com/F5Networks/terraform-azure-bigip-module

- https://github.com/F5Networks/terraform-gcp-bigip-module

- https://github.com/GhostTroops/TOP

- https://github.com/GovindPalakkal/EvilRip

- https://github.com/H1CH444MREB0RN/PenTest-free-tools

- https://github.com/Hatcat123/my_stars

- https://github.com/HimmelAward/Goby_POC

- https://github.com/ImranTheThirdEye/AD-Pentesting-Tools

- https://github.com/Inayathussain786305/Bugbounty-one-liner

- https://github.com/Insane-Forensics/Shodan_SHIFT

- https://github.com/JERRY123S/all-poc

- https://github.com/JSec1337/RCE-CVE-2020-5902

- https://github.com/KayCHENvip/vulnerability-poc

- https://github.com/LearnGolang/LearnGolang

- https://github.com/Mbilse/GitHub-Chinese-Top-Charts

- https://github.com/MedoX71T/Awesome-Oneliner-Bugbounty

- https://github.com/Mehedi-Babu/pentest_tools_repo

- https://github.com/Micr067/Pentest_Note

- https://github.com/Mikej81/PowerSRG

- https://github.com/Miraitowa70/POC-Notes

- https://github.com/Mohit0/zero-scanner

- https://github.com/Mr-xn/Penetration_Testing_POC

- https://github.com/MrCl0wnLab/checker-CVE-2020-5902

- https://github.com/MrPWH/Pentest-Tools

- https://github.com/N3T-hunt3r/awesome-oneliner

- https://github.com/Net-hunter121/awesome-oneliner-bugbounty

- https://github.com/NetW0rK1le3r/awesome-hacking-lists

- https://github.com/NyxAzrael/Goby_POC

- https://github.com/Ostorlab/KEV

- https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors

- https://github.com/Prodrious/awesome-onliner-bugbounty

- https://github.com/PushpenderIndia/CVE-2020-5902-Scanner

- https://github.com/PwnAwan/Awesome-HTTPRequestSmuggling

- https://github.com/ReAbout/audit-java

- https://github.com/ReekElderblood/Can-I-Check

- https://github.com/S3cur3Th1sSh1t/My-starred-Repositories

- https://github.com/S3cur3Th1sSh1t/Pentest-Tools

- https://github.com/Samsar4/Bug-Bounty-tips-from-Twitter

- https://github.com/SecuritySphinx/Can-I-Check

- https://github.com/SexyBeast233/SecBooks

- https://github.com/Shu1L/CVE-2020-5902-fofa-scan

- https://github.com/Singhsanjeev617/A-Red-Teamer-diaries

- https://github.com/SujalMeghwal/Can-I-Check

- https://github.com/TheCyberViking/CVE-2020-5902-Vuln-Checker

- https://github.com/TheCyberViking/TheCyberViking

- https://github.com/Threekiii/Awesome-POC

- https://github.com/TrojanAZhen/Self_Back

- https://github.com/Tyro-Shan/gongkaishouji

- https://github.com/Un4gi/CVE-2020-5902

- https://github.com/Waseem27-art/ART-TOOLKIT

- https://github.com/WingsSec/Meppo

- https://github.com/XTeam-Wing/RedTeaming2020

- https://github.com/XiaomingX/awesome-poc-for-red-team

- https://github.com/YIXINSHUWU/Penetration_Testing_POC

- https://github.com/YellowVeN0m/Pentesters-toolbox

- https://github.com/Ygodsec/-

- https://github.com/Z0fhack/Goby_POC

- https://github.com/ZTK-009/Penetration_PoC

- https://github.com/Zierax/R-Meth

- https://github.com/Zinkuth/F5-BIG-IP-CVE-2020-5902

- https://github.com/adarshshetty1/content

- https://github.com/ajdumanhug/CVE-2020-5902

- https://github.com/alphaSeclab/sec-daily-2020

- https://github.com/amcai/myscan

- https://github.com/amitlttwo/CVE-2020-5902

- https://github.com/apachecn-archive/Middleware-Vulnerability-detection

- https://github.com/aqhmal/CVE-2020-5902-Scanner

- https://github.com/ar0dd/CVE-2020-5902

- https://github.com/atlantissupp/onelinerbycoffin

- https://github.com/ayhan-dev/BugBountys

- https://github.com/ayush2000003/bb-onliner

- https://github.com/bhassani/Recent-CVE

- https://github.com/bhavesh-pardhi/One-Liner

- https://github.com/bhdresh/SnortRules

- https://github.com/bigblackhat/oFx

- https://github.com/blackend/Diario-RedTem

- https://github.com/byt3bl33d3r/WitnessMe

- https://github.com/byt3exec/WitnessMe

- https://github.com/chenjj/Awesome-HTTPRequestSmuggling

- https://github.com/cipher387/awesome-ip-search-engines

- https://github.com/corelight/CVE-2020-5902-F5BigIP

- https://github.com/cristiano-corrado/f5_scanner

- https://github.com/cyberanand1337x/bug-bounty-2022

- https://github.com/cybersecurityworks553/scanner-CVE-2020-5902

- https://github.com/czq945659538/-study

- https://github.com/d4n-sec/d4n-sec.github.io

- https://github.com/d4rk007/F5-Big-IP-CVE-2020-5902-mass-exploiter

- https://github.com/deepsecurity-pe/GoF5-CVE-2020-5902

- https://github.com/developer3000S/PoC-in-GitHub

- https://github.com/dnerzker/CVE-2020-5902

- https://github.com/dnif/content

- https://github.com/dunderhay/CVE-2020-5902

- https://github.com/dwisiswant0/CVE-2020-5902

- https://github.com/dwisiswant0/awesome-oneliner-bugbounty

- https://github.com/elinakrmova/RedTeam-Tools

- https://github.com/emonilo/WitnessMe

- https://github.com/emtee40/win-pentest-tools

- https://github.com/f5devcentral/cve-2020-5902-ioc-bigip-checker

- https://github.com/faisalfs10x/F5-BIG-IP-CVE-2020-5902-shodan-scanner

- https://github.com/fierceoj/ShonyDanza

- https://github.com/flyopenair/CVE-2020-5902

- https://github.com/freeFV/CVE-2020-5902-fofa-scan

- https://github.com/freeFV/CVE-2020-6308-mass-exploiter

- https://github.com/gaahrdner/starred

- https://github.com/gd-discov3r/bugbounty

- https://github.com/hack-parthsharma/Pentest-Tools

- https://github.com/haisenberg/CVE-2020-5902

- https://github.com/halencarjunior/f5scan

- https://github.com/hanc00l/some_pocsuite

- https://github.com/harshinsecurity/one_liner

- https://github.com/hasee2018/Penetration_Testing_POC

- https://github.com/hectorgie/PoC-in-GitHub

- https://github.com/hexxxvenom/bugliner

- https://github.com/hktalent/TOP

- https://github.com/hktalent/bug-bounty

- https://github.com/hogehuga/epss-db

- https://github.com/huike007/penetration_poc

- https://github.com/huike007/poc

- https://github.com/huimzjty/vulwiki

- https://github.com/huisetiankong478/penetration_poc

- https://github.com/huisetiankong478/poc

- https://github.com/ibnufachrizal/bugbounty

- https://github.com/ihebski/A-Red-Teamer-diaries

- https://github.com/inho28/CVE-2020-5902-F5-BIGIP

- https://github.com/itsjeffersonli/CVE-2020-5902

- https://github.com/jared1981/More-Pentest-Tools

- https://github.com/jas502n/CVE-2020-5902

- https://github.com/jbmihoub/all-poc

- https://github.com/jiansiting/CVE-2020-5902

- https://github.com/jinnywc/CVE-2020-5902

- https://github.com/jonwest1jonwest1/terraform-gcp-bigip-module

- https://github.com/jsongmax/F5-BIG-IP-TOOLS

- https://github.com/k3nundrum/CVE-2020-5902

- https://github.com/kdandy/pentest_tools

- https://github.com/keshavskn123/CDAC

- https://github.com/libralog/Can-I-Check

- https://github.com/lijiaxing1997/CVE-2020-5902-POC-EXP

- https://github.com/lions2012/Penetration_Testing_POC

- https://github.com/litt1eb0yy/One-Liner-Scripts

- https://github.com/lnick2023/nicenice

- https://github.com/lovechinacoco/https-github.com-mai-lang-chai-Middleware-Vulnerability-detection

- https://github.com/ltvthang/CVE-2020-5903

- https://github.com/ludy-dev/BIG-IP-F5-TMUI-RCE-Vulnerability

- https://github.com/megabyte-b/Project-Ares

- https://github.com/merlinepedra/Pentest-Tools

- https://github.com/merlinepedra/nuclei-templates

- https://github.com/merlinepedra25/Pentest-Tools

- https://github.com/merlinepedra25/Pentest-Tools-1

- https://github.com/merlinepedra25/nuclei-templates

- https://github.com/mikesdsd/bugbounty

- https://github.com/mk-g1/Awesome-One-Liner-Bug-Bounty

- https://github.com/momika233/cve-2020-5902

- https://github.com/morkin1792/security-tests

- https://github.com/murataydemir/CVE-2020-5902

- https://github.com/mustafaakalin/bugbounty

- https://github.com/naufalqwe/awesome-oneliner

- https://github.com/nirsarkar/AOl-Bounty

- https://github.com/nitishbadole/Pentest_Tools

- https://github.com/nitishbadole/bug1

- https://github.com/nitishbadole/bug2

- https://github.com/nomi-sec/PoC-in-GitHub

- https://github.com/nsflabs/CVE-2020-5902

- https://github.com/openx-org/BLEN

- https://github.com/password520/Penetration_PoC

- https://github.com/pathakabhi24/Pentest-Tools

- https://github.com/pen4uin/awesome-vulnerability-research

- https://github.com/pen4uin/vulnerability-research

- https://github.com/pen4uin/vulnerability-research-list

- https://github.com/pentration/gongkaishouji

- https://github.com/pinkie-ljz/GitHub-Chinese-Top-Charts

- https://github.com/pinkieli/GitHub-Chinese-Top-Charts

- https://github.com/pjgmonteiro/Pentest-tools

- https://github.com/puckiestyle/A-Red-Teamer-diaries

- https://github.com/pwnhacker0x18/CVE-2020-5902-Mass

- https://github.com/qazbnm456/awesome-cve-poc

- https://github.com/qiong-qi/CVE-2020-5902-POC

- https://github.com/qlkwej/poc-CVE-2020-5902

- https://github.com/r0eXpeR/supplier

- https://github.com/r0ttenbeef/cve-2020-5902

- https://github.com/readloud/Awesome-Stars

- https://github.com/renanhsilva/checkvulnCVE20205902

- https://github.com/retr0-13/Pentest-Tools

- https://github.com/retr0-13/witnessMe

- https://github.com/rockmelodies/CVE-2020-5902-rce-gui

- https://github.com/rockmelodies/rocComExpRce

- https://github.com/ronin-dojo/Oneliners3

- https://github.com/rumputliar/copy-awesome-oneliner-bugbounty

- https://github.com/rwincey/CVE-2020-5902-NSE

- https://github.com/scagogogo/cve

- https://github.com/severnake/Pentest-Tools

- https://github.com/shanyuhe/YesPoc

- https://github.com/shigophilo/tools

- https://github.com/sobinge/nuclei-templates

- https://github.com/soosmile/POC

- https://github.com/sujaygr8/Big-IP-exploit

- https://github.com/superfish9/pt

- https://github.com/superzerosec/cve-2020-5902

- https://github.com/superzerosec/poc-exploit-index

- https://github.com/sv3nbeast/Attack-Notes

- https://github.com/sv3nbeast/CVE-2020-5902_RCE

- https://github.com/t31m0/awesome-oneliner-bugbounty

- https://github.com/taielab/awesome-hacking-lists

- https://github.com/tdtc7/qps

- https://github.com/th3cyb3rhub/hackliner

- https://github.com/tharmigaloganathan/ECE9069-Presentation-2

- https://github.com/theLSA/f5-bigip-rce-cve-2020-5902

- https://github.com/thecyberworld/cybersec-oneliner

- https://github.com/thecyberworld/hackliner

- https://github.com/theyoge/AD-Pentesting-Tools

- https://github.com/tov-a/Awesome-Oneliner-Bugbounty-1

- https://github.com/trhacknon/CVE-2020-5902-Scanner

- https://github.com/trhacknon/One-Liners

- https://github.com/tucommenceapousser/awesome-oneliner-bugbounty

- https://github.com/tufanturhan/Red-Teamer-Diaries

- https://github.com/un4gi/CVE-2020-5902

- https://github.com/vohvelikissa/bugbouncing

- https://github.com/wdlid/CVE-2020-5902-fix

- https://github.com/weeka10/-hktalent-TOP

- https://github.com/west9b/F5-BIG-IP-POC

- https://github.com/winterwolf32/CVE-S---Penetration_Testing_POC-

- https://github.com/x86trace/Oneliners

- https://github.com/xbl2022/awesome-hacking-lists

- https://github.com/xiaoy-sec/Pentest_Note

- https://github.com/xinyisleep/pocscan

- https://github.com/xuetusummer/Penetration_Testing_POC

- https://github.com/xuguowong/Mirai-MAL

- https://github.com/yasserjanah/CVE-2020-5902

- https://github.com/yassineaboukir/CVE-2020-5902

- https://github.com/yedada-wei/-

- https://github.com/yedada-wei/gongkaishouji

- https://github.com/z3n70/CVE-2020-5902

- https://github.com/zhang040723/web

- https://github.com/zhanpengliu-tencent/medium-cve

- https://github.com/zhoubingyan1/Golang-Learning

- https://github.com/zhzyker/CVE-2020-5902

- https://github.com/zhzyker/exphub

- https://github.com/zoroqi/my-awesome