vulnerability

F5: CVE-2019-6642: K40378764: F5 tmsh vulnerability CVE-2019-6642

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:S/C:C/I:C/A:C)

Published

Jun 27, 2019

Added

Jun 17, 2026

Modified

Jun 17, 2026

Description

Authenticated users with the ability to upload files (via scp, for example) can escalate their privileges to allow root shell access from within the TMOS Shell (tmsh) interface. Thetmshinterface allows users to execute a secondary program via tools likesftporscp.

Solution

f5-bigip-upgrade-latest

References

CVE-2019-6642
https://attackerkb.com/topics/CVE-2019-6642
https://my.f5.com/manage/s/article/K40378764
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-16201
EUVD-EUVD-2019-16201

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report