HackerFeeds
All CVEs

CVE-2020-5902

CRITICAL9.8
CISA KEV

Published 2020-07-01 · Updated 2026-06-17 · Source f5sirt@f5.com

Summary

CVE-2020-5902 is a critical-severity (CVSS 9.8) vulnerability in F5 BIG-IP. CISA added it to the Known Exploited Vulnerabilities catalog on November 3, 2021, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by May 3, 2022. CISA also lists it as known to be used in ransomware campaigns, so it should be prioritised accordingly. F5 has 8 vulnerabilities in the KEV catalog, 4 of them linked to ransomware.

All 8 known-exploited F5 vulnerabilities →

Description

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages.

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-22CWE-22

CISA Known-Exploited Vulnerability

Product: F5 — BIG-IP

Name: F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability

Date added: 2021-11-03 · Due: 2022-05-03

USED IN RANSOMWARE

Required action: Apply updates per vendor instructions.

References

View on NVD