F5 Fixes Critical RCE Bugs in BIG-IP Next Central Manager

F5 has released updates to fix two vulnerabilities that can allow an unauthenticated remote attacker to gain complete control of the company’s BIG-IP Next Central Manager console. The attacker could then take advantage of three separate bugs to add invisible accounts on other BIG-IP devices controlled by the Next Central Manager.

The flaws affect versions 20.0.1 - 20.1.0 of the console and researchers from Eclypsium discovered them and disclosed them to F5, which released patches on Wednesday. One of the …

accounts attacker big big-ip big-ip next central manager bugs can console control critical devices fix fixes manager next rce the company unauthenticated updates vulnerabilities