CVE-2012-1493

This Metasploit module exploits CVE-2012-1493 by using a hardcoded RSA private key to authenticate as root via SSH on F5 BIG-IP appliances. It establishes an interactive shell session upon successful authentication.

This exploit leverages a hardcoded RSA private key to bypass authentication on F5 BIG-IP devices, allowing direct SSH access as root. The script automates the process by writing the key to a file, setting permissions, and initiating an SSH connection.

This advisory describes an authentication bypass vulnerability in F5 BIG-IP devices, where a hardcoded SSH private key allows unauthenticated root access. The vulnerability affects multiple versions of BIG-IP platforms without SCCP.

This Metasploit module exploits a known private SSH key exposure in F5 BIG-IP appliances, allowing passwordless root authentication. It uses a hardcoded RSA private key to authenticate and establish an interactive shell session.