Data Processing Issue in F5 Networks' BIG-IP ASM and Advanced WAF
CVE-2020-27728

7.5HIGH

Key Information:

Vendor
F5
Status
Big-ip Asm & Advanced Waf
Vendor
CVE Published:
24 December 2020

Summary

An issue has been identified in F5 Networks' BIG-IP ASM and Advanced WAF, where under specific conditions, the Analytics, Visibility, and Reporting Daemon (AVRD) may unintentionally generate a core file and restart when processing requests originating from mobile devices. This behavior could potentially disrupt the normal operation of the system and affect data integrity and availability.

Affected Version(s)

BIG-IP ASM & Advanced WAF 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3

References

https://support.f5.com/csp/article/K45143221
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.