F5 Networks has fixed a critical remote code execution (RCE) vulnerability, tracked as CVE-2020-5902, that resides in undisclosed pages of Traffic Management User Interface (TMUI) of the BIG-IP product. US Cyber Command is urging organizations using the F5 product to immediately patch their installs. The vulnerability could be exploited by attackers to execute arbitrary system commands, disable services, execute arbitrary Java code, and create or delete files, and potentially take over the Big-IP device.”]
Source: https://securityaffairs.co/wordpress/105563/hacking/f5-big-ip-flaw-exploitation.html