Security News > 2020 > July > Hackers Start Exploiting Recently Patched BIG-IP Vulnerability

Hackers have already started exploiting a recently patched vulnerability affecting F5 Networks' BIG-IP application delivery controller.

F5 informed customers last week that a BIG-IP configuration utility named Traffic Management User Interface is impacted by a critical remote code execution vulnerability whose exploitation can result in "Complete system compromise."

Just days after the disclosure of CVE-2020-5902, researchers started releasing proof-of-concept exploits for arbitrary file read and remote code execution.

A video published by DeeLMind shows just how easy it is to exploit the vulnerability if the BIG-IP configuration interface is exposed.

The first attacks observed by NCC read files and extracted encrypted passwords, but they did not attempt remote code execution and the delivery of a binary payload. The U.S. Cyber Command has advised organizations to immediately apply the patches for CVE-2020-5902 and CVE-2020-5903, another vulnerability discovered by Positive Technologies that can be exploited to take complete control of a BIG-IP system.

News URL

http://feedproxy.google.com/~r/Securityweek/~3/fYp4FuJ7__g/hackers-start-exploiting-recently-patched-big-ip-vulnerability