Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-20029

No fix known EPSS 7%CVSS 8.8

Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an authenticated attacker to execute arbitrary system commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Published 2025-02-05 · CVE record · OSV

Products: F5 BIG-IP