Service Disruption Vulnerability in F5 BIG-IP and BIG-IQ Products
CVE-2020-5930

7.5HIGH

Key Information:

Vendor
F5
Status
Big-ip, Big-iq
Vendor
CVE Published:
25 September 2020

Summary

F5 BIG-IP and BIG-IQ products have a vulnerability that allows unauthenticated attackers to disrupt service through undisclosed methods. This affects multiple versions across both product lines, potentially leading to significant service interruptions. Organizations employing these systems should take immediate action to understand their exposure and implement appropriate mitigations to safeguard their network infrastructure.

Affected Version(s)

BIG-IP, BIG-IQ BIG-IP 15.0.0-15.1.0.4, 14.1.0-14.1.2.7, 13.1.0-13.1.3.3, 12.1.0-12.1.5.2, 11.6.1-11.6.5.2

BIG-IP, BIG-IQ BIG-IQ 5.2.0-7.1.0

References

https://support.f5.com/csp/article/K20622530
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.