Vulnerability in F5 Big-Ip 2800
CVE-2020-5851
On impacted versions and platforms the Trusted Platform Module (TPM) system integrity check cannot detect modifications to specific system components. This issue only impacts specific engineering hotfixes and platforms. NOTE: This vulnerability does not affect any of the BIG-IP major, minor or maintenance releases you obtained from downloads.f5.com. The affected Engineering Hotfix builds are as follows: Hotfix-BIGIP-14.1.0.2.0.45.4-ENG Hotfix-BIGIP-14.1.0.2.0.62.4-ENG
EPSS: 0.003 (25.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.6 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
Affected products
- F5 Big-ip_2800
- F5 Big-ip_access_policy_manager — versions 14.1.0.2.0.45.4, 14.1.0.2.0.62.4
- F5 Big-ip_advanced_firewall_manager — versions 14.1.0.2.0.45.4, 14.1.0.2.0.62.4
- F5 Big-ip_analytics — versions 14.1.0.2.0.45.4, 14.1.0.2.0.62.4
- F5 Big-ip_application_acceleration_manager — versions 14.1.0.2.0.45.4, 14.1.0.2.0.62.4
- F5 Big-ip_application_security_manager — versions 14.1.0.2.0.45.4, 14.1.0.2.0.62.4
- F5 Big-ip_domain_name_system — versions 14.1.0.2.0.45.4, 14.1.0.2.0.62.4
- F5 Big-ip_edge_gateway — versions 14.1.0.2.0.45.4, 14.1.0.2.0.62.4
- F5 Big-ip_fraud_protection_service — versions 14.1.0.2.0.45.4, 14.1.0.2.0.62.4
- F5 Big-ip_global_traffic_manager — versions 14.1.0.2.0.45.4, 14.1.0.2.0.62.4
References
- f5sirt@f5.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-5851?
- CVE-2020-5851 is a medium-severity vulnerability in F5 Big-Ip 2800. CVSS score: 4.6/10. Published 2020-01-14.
- How severe is CVE-2020-5851?
- Medium severity. CVSS v3 base score is 4.6 out of 10.