CVE-2018-5520

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.2.1 through 11.6.3.1 F5 BIG-IP versions 12.1.0 through 12.1.3.1 F5 BIG-IP versions 13.0.0 through 13.1.0.5

Description The issue allows an administrative user to gain unauthorized access to file system resources using the dig utility in the TMOS Shell (tmsh) on systems configured in Appliance mode.

Recommendations For F5 BIG-IP versions 11.2.1 through 11.6.3.1, restrict access to the tmsh utility to minimize the risk of exploitation. For F5 BIG-IP versions 12.1.0 through 12.1.3.1, consider disabling the dig utility in the TMOS Shell until a fix is available. For F5 BIG-IP versions 13.0.0 through 13.1.0.5, limit the use of the tmsh utility to only necessary administrative tasks to reduce the risk of unauthorized access.