Vulnerability in F5 Big-Ip Access Policy Manager
CVE-2020-5862
On BIG-IP 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.2, under certain conditions, TMM may crash or stop processing new traffic with the DPDK/ENA driver on AWS systems while sending traffic. This issue does not affect any other platforms, hardware or virtual, or any other cloud provider since the affected driver is specific to AWS.
EPSS: 0.011 (61.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- F5 Big-ip_access_policy_manager
- F5 Big-ip_advanced_firewall_manager
- F5 Big-ip_analytics
- F5 Big-ip_application_acceleration_manager
- F5 Big-ip_application_security_manager
- F5 Big-ip_domain_name_system
- F5 Big-ip_fraud_protection_service
- F5 Big-ip_global_traffic_manager
- F5 Big-ip_link_controller
- F5 Big-ip_local_traffic_manager
References
- f5sirt@f5.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-5862?
- CVE-2020-5862 is a high-severity vulnerability in F5 Big-Ip Access Policy Manager. CVSS score: 7.5/10. Published 2020-03-27.
- How severe is CVE-2020-5862?
- High severity. CVSS v3 base score is 7.5 out of 10.