CVE-2020-5851

f5 big-ip local traffic manager, f5 big-ip advanced firewall manager, f5 big-ip application acceleration manager +10 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-5851

Katalog CVE

CVSS 4.6 · Medium EPSS 0,33%

Kerentanan pada f5 big-ip local traffic manager, f5 big-ip advanced firewall manager +11 lainnya. Skor CVSS 3.1 4.6 (Medium) menurut NVD.

Deskripsi (NVD)

On impacted versions and platforms the Trusted Platform Module (TPM) system integrity check cannot detect modifications to specific system components. This issue only impacts specific engineering hotfixes and platforms. NOTE: This vulnerability does not affect any of the BIG-IP major, minor or maintenance releases you obtained from downloads.f5.com. The affected Engineering Hotfix builds are as follows: Hotfix-BIGIP-14.1.0.2.0.45.4-ENG Hotfix-BIGIP-14.1.0.2.0.62.4-ENG

Rincian

Terbit di NVD
14 Januari 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
4.6 (Medium), sumber NVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator
EPSS (30 hari)
0,33% peluang dieksploitasi; lebih tinggi dari 24,6% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
f5 big-ip local traffic manager Versi 14.1.0.2.0.45.4
f5 big-ip local traffic manager Versi 14.1.0.2.0.62.4
f5 big-ip advanced firewall manager Versi 14.1.0.2.0.45.4
f5 big-ip advanced firewall manager Versi 14.1.0.2.0.62.4
f5 big-ip application acceleration manager Versi 14.1.0.2.0.45.4
f5 big-ip application acceleration manager Versi 14.1.0.2.0.62.4
f5 big-ip analytics Versi 14.1.0.2.0.45.4
f5 big-ip analytics Versi 14.1.0.2.0.62.4
f5 big-ip access policy manager Versi 14.1.0.2.0.45.4
f5 big-ip access policy manager Versi 14.1.0.2.0.62.4
f5 big-ip application security manager Versi 14.1.0.2.0.45.4
f5 big-ip application security manager Versi 14.1.0.2.0.62.4
f5 big-ip edge gateway Versi 14.1.0.2.0.45.4
f5 big-ip edge gateway Versi 14.1.0.2.0.62.4
f5 big-ip fraud protection service Versi 14.1.0.2.0.45.4
f5 big-ip fraud protection service Versi 14.1.0.2.0.62.4
f5 big-ip global traffic manager Versi 14.1.0.2.0.45.4
f5 big-ip global traffic manager Versi 14.1.0.2.0.62.4
f5 big-ip link controller Versi 14.1.0.2.0.45.4
f5 big-ip link controller Versi 14.1.0.2.0.62.4
f5 big-ip policy enforcement manager Versi 14.1.0.2.0.45.4
f5 big-ip policy enforcement manager Versi 14.1.0.2.0.62.4
f5 big-ip webaccelerator Versi 14.1.0.2.0.45.4
f5 big-ip webaccelerator Versi 14.1.0.2.0.62.4
f5 big-ip domain name system Versi 14.1.0.2.0.45.4
f5 big-ip domain name system Versi 14.1.0.2.0.62.4

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.