VulnerabilityModified

CVE-2018-5511

On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced.

HIGH 7.2EPSS 14.5%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 14.5%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.

Description

CVSS 3.0: 7.2 HIGHCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS: 14.47% probability · 96th percentile
CISA KEV: Not listed
Weakness: CWE-470
Affected: f5/big-ip local traffic manager · f5/big-ip application acceleration manager · f5/big-ip advanced firewall manager · f5/big-ip analytics · f5/big-ip access policy manager · f5/big-ip application security manager · f5/big-ip edge gateway · f5/big-ip global traffic manager · f5/big-ip link controller · f5/big-ip policy enforcement manager · f5/big-ip webaccelerator · f5/big-ip websafe · f5/big-ip domain name system · f5/big-ip enterprise manager · vmware/workstation · vmware/workstation player
Source: f5sirt@f5.com

References

http://packetstormsecurity.com/files/152213/VMware-Host-VMX-Process-Impersonation-Hijack-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
https://support.f5.com/csp/article/K30500703Vendor Advisory
https://www.exploit-db.com/exploits/46600/Exploit, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/152213/VMware-Host-VMX-Process-Impersonation-Hijack-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
https://support.f5.com/csp/article/K30500703Vendor Advisory
https://www.exploit-db.com/exploits/46600/Exploit, Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.