CVSS 3.0
7.2 highCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2018-5511
High (7.2). EPSS 14% chance of exploitation in the next 30 days.
On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced.
Severity
- EPSS
- 14% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
- CWE
- CWE-470
- Published
- Modified
- Record from
- the NVD, synced
Affected
- f5:big-ip_access_policy_manager
- f5:big-ip_advanced_firewall_manager
- f5:big-ip_analytics
- f5:big-ip_application_acceleration_manager
- f5:big-ip_application_security_manager
- f5:big-ip_domain_name_system
- f5:big-ip_edge_gateway
- f5:big-ip_enterprise_manager
- f5:big-ip_global_traffic_manager
- f5:big-ip_link_controller
- f5:big-ip_local_traffic_manager
- f5:big-ip_policy_enforcement_manager
- f5:big-ip_webaccelerator
- f5:big-ip_websafe
- vmware:workstation
- vmware:workstation_player
References
- http://packetstormsecurity.com/files/152213/VMware-Host-VMX-Process-Impersonation-Hijack-Privilege-Escalation.html
- https://support.f5.com/csp/article/K30500703
- https://www.exploit-db.com/exploits/46600/
- http://packetstormsecurity.com/files/152213/VMware-Host-VMX-Process-Impersonation-Hijack-Privilege-Escalation.html
- https://support.f5.com/csp/article/K30500703