F5 issues fixes for major cybersecurity flaw

  • Hi there and welcome to PC Help Forum (PCHF), a more effective way to get the Tech Support you need!
    We have Experts in all areas of Tech, including Malware Removal, Crash Fixing and BSOD's , Microsoft Windows, Computer DIY and PC Hardware, Networking, Gaming, Tablets and iPads, General and Specific Software Support and so much more.

    Why not Click Here To Sign Up and start enjoying great FREE Tech Support.

    This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Welcome to our Community
Wanting to join the rest of our members? Feel free to sign up today.
Sign up

PCHF IT Feeds

PCHF Tech News
PCHF Bot
Jan 10, 2015
52,091
26
pchelpforum.net
F5 has issued patches for its BIG-IP application delivery controllers after a security researcher discovered two critical vulnerabilities in its software.

The vulnerabilities, tracked as CVE-2020-5902 and CVE-2020-5903, reside in a configuration tool known as the Traffic Management User Interface and exploiting them could allow an attacker to gain full admin control over a vulnerable device.

The first vulnerability has a CVSS score of 10 out of 10 and puts F5's networking equipment at risk of arbitrary code execution while the second one has a CVSS score of 7.5 and is a JavaScript-based cross-site scripting (XSS) vulnerability.


What makes these flaws particularly concerning is due to the fact that many large enterprises use BIG-IP gear to handle sending traffic to and from their critical applications. An attack that successfully exploited these vulnerabilities could potentially be disastrous for the many of the Fortune 500 companies that are customers of F5.

BIG-IP application delivery controller


The flaws themselves were first discovered by senior web application security researcher Mikhail Klyuchnikov at Positive Technologies who provided further insight on them in a blog post, saying:

“By exploiting this vulnerability, a remote attacker with access to the BIG-IP configuration utility could, without authorization, perform remote code execution. The attacker can create or delete files, disable services, intercept information, run arbitrary system commands and Java code, completely compromise the system, and pursue further targets, such as the internal network. RCE in this case results from security flaws in multiple components, such as one that allows directory traversal exploitation. This is particularly dangerous for companies whose F5 BIG-IP web interface is listed on search engines such as Shodan. Fortunately, most companies using the product do not enable access to the interface from the internet."

Network admins are advised to update their firmware as soon as possible to avoid falling victim to any potential attacks leveraging the two vulnerabilities.

The flaws are present in BIG-IP versions 11 through 15 and those using the company's networking equipment can find more details on how to patch them in this security bulletin as well as this one from F5 Networks.


Via The Register

Continue reading...