CVE-2018-5511

On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced.

• CWE-470

• http://packetstormsecurity.com/files/152213/VMware-Host-VMX-Process-Impersonation-Hijack-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
• https://support.f5.com/csp/article/K30500703Vendor Advisory
• https://www.exploit-db.com/exploits/46600/Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/152213/VMware-Host-VMX-Process-Impersonation-Hijack-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
• https://support.f5.com/csp/article/K30500703Vendor Advisory
• https://www.exploit-db.com/exploits/46600/Exploit, Third Party Advisory, VDB Entry

Published

Apr 13, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5505On F5 BIG-IP versions 13.1.0 - 13.1.0.3, when ASM and AVR ar…
• CVE-2018-5506In F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.1, 11.5.1-11.5.5, o…
• CVE-2018-5507On F5 BIG-IP versions 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.2…
• CVE-2018-5508On F5 BIG-IP PEM versions 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11…
• CVE-2018-5509On F5 BIG-IP versions 13.0.0 or 12.1.0 - 12.1.3.1, when a sp…
• CVE-2018-5510On F5 BIG-IP 11.5.4 HF4-11.5.5, the Traffic Management Micro…
• CVE-2018-5512On F5 BIG-IP 13.1.0-13.1.0.5, when Large Receive Offload (LR…
• CVE-2018-5513On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.3, 11.6.…
• CVE-2018-5514On F5 BIG-IP 13.1.0-13.1.0.5, maliciously crafted HTTP/2 req…
• CVE-2018-5515On F5 BIG-IP 13.0.0-13.1.0.5, using RADIUS authentication re…
• CVE-2018-5516On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.…
• CVE-2018-5517On F5 BIG-IP 13.1.0-13.1.0.5, malformed TCP packets sent to …