Skip to main content
All vulnerabilities
CVE-2020-5902 Known ransomware use

F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability

F5BIG-IP

Added to KEV catalog
3 November 2021
Federal remediation due date
3 May 2022
Weakness classification (CWE)
CWE-22

CISA Description

F5 BIG-IP Traffic Management User Interface (TMUI) contains a remote code execution vulnerability in undisclosed pages.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-5902

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services