USCYBERCOM urgently recommends F5 customers to patch CVE-2020-5902 and 5903 NOW

[InfoSec News <alerts () infosecnews org>]

https://www.infosecnews.org/uscybercom-urgently-recommends-f5-customers-to-patch-cve-2020-5902-and-5903-now/

By William Knowles @c4i
Senior Editor
InfoSec News
July 6, 2020

Just in case you accidentally had your work phone and duty pager in a Faraday 
bag all July 4th holiday weekend long, you have one heckuva surprise waiting 
for you!

As F5 reminds everyone that 48 of Fortune 50 companies are F5 customers, 
F5 has published a security advisory warning to their customers to patch a 
critical flaw in their BIG-IP product and proof-of-concept attacks are 
already starting to show up on Twitter.

The Traffic Management User Interface (TMUI), also referred to as the 
Configuration utility, has a Remote Code Execution (RCE) vulnerability in 
undisclosed pages. (CVE-2020-5902)

[...]



--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
Follow InfoSec News on Twitter
https://twitter.com/infosecnews_
Follow InfoSec News on LinkedIn
https://www.linkedin.com/company/infosecnews/