Skip to main content
Partner Notice & Advisories

Vulnerabilities in F5 BIG-IP

By July 8, 2020June 22nd, 2021No Comments

Advisory Type:  IT Security
Severity:  Critical

PDS is providing the following communication to build awareness of a critical vulnerability and patches in F5 BIG-IP products.

On June 30, 2020 F5 posted K52145254 disclosing that a critical vulnerability exists in the BIG-IP Traffic Management User Interface (TMUI). F5 has confirmed reports that the vulnerability is being actively exploited. The vulnerability can allow attackers unauthenticated access to run arbitrary system commands. This issue impacts only the control plane of the F5 system, data plane functionality is not affected. Note, BIG-IQ Management and Traffix SDC products are not vulnerable.

The affected product versions and patched versions are:

Product Version Upgrade to
BIG-IP 16.x 16.0.0


We strongly advise customers to review the F5 advisory and upgrade their environments.  PDS Architects are available to assist with the upgrades, your Account Director can assist in arranging for this upgrade support.