CVE-2020-5881
published 2020-04-30CVE-2020-5881: On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when the BIG-IP Virtual Edition (VE) is configured with VLAN groups and there are devices…
PriorityP340high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
1.31%
70.4th percentile
On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when the BIG-IP Virtual Edition (VE) is configured with VLAN groups and there are devices configured with OSPF connected to it, the Network Device Abstraction Layer (NDAL) Interfaces can lock up and in turn disrupting the communication between the mcpd and tmm processes.
Affected
44 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| f5 | big-ip_aam | — | — |
| f5 | big-ip_access_policy_manager | 13.1.0 – 13.1.3.3 | — |
| f5 | big-ip_access_policy_manager | 14.1.0 – 14.1.2.3 | — |
| f5 | big-ip_access_policy_manager | 15.0.0 – 15.1.0.1 | — |
| f5 | big-ip_advanced_firewall_manager | 13.1.0 – 13.1.3.3 | — |
| f5 | big-ip_advanced_firewall_manager | 14.1.0 – 14.1.2.3 | — |
| f5 | big-ip_advanced_firewall_manager | 15.0.0 – 15.1.0.1 | — |
| f5 | big-ip_afm | — | — |
| f5 | big-ip_analytics | — | — |
| f5 | big-ip_analytics | 13.1.0 – 13.1.3.3 | — |
| f5 | big-ip_analytics | 14.1.0 – 14.1.2.3 | — |
| f5 | big-ip_analytics | 15.0.0 – 15.1.0.1 | — |
| f5 | big-ip_apm | — | — |
| f5 | big-ip_application_acceleration_manager | 13.1.0 – 13.1.3.3 | — |
| f5 | big-ip_application_acceleration_manager | 14.1.0 – 14.1.2.3 | — |
| f5 | big-ip_application_acceleration_manager | 15.0.0 – 15.1.0.1 | — |
| f5 | big-ip_application_security_manager | 13.1.0 – 13.1.3.3 | — |
| f5 | big-ip_application_security_manager | 14.1.0 – 14.1.2.3 | — |
| f5 | big-ip_application_security_manager | 15.0.0 – 15.1.0.1 | — |
| f5 | big-ip_asm | — | — |
| f5 | big-ip_dns | — | — |
| f5 | big-ip_domain_name_system | 13.1.0 – 13.1.3.3 | — |
| f5 | big-ip_domain_name_system | 14.1.0 – 14.1.2.3 | — |
| f5 | big-ip_domain_name_system | 15.0.0 – 15.1.0.1 | — |
| f5 | big-ip_fps | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
F5
CVE-2020-5881: On versions 15
vendor_f5·2020-04-30·CVSS 7.5
CVE-2020-5881 [HIGH] CVE-2020-5881: On versions 15
CVE-2020-5881: On versions 15
On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when the BIG-IP Virtual Edition (VE) is configured with VLAN groups and there are devices configured with OSPF connected to it, the Network Device Abstraction Layer (NDAL) Interfaces can lock up and in turn disrupting the communication between the mcpd and tmm processes.
Affected Products: BIG-IP AAM, BIG-IP AFM, BIG-IP APM, BIG-IP ASM, BIG-IP Analytics, BIG-IP DNS, BIG-IP FPS, BIG-IP GTM, BIG-IP LTM, BIG-IP Link Controller, BIG-IP PEM
Affected Versions: 13.1.0 - 13.1.3.3; 14.1.0 - 14.1.2.3; 15.0.0 - 15.1.0.1
F5 Advisory Articles: K03386032
F5 References: https://support.f5.com/csp/article/K03386032
GHSA
GHSA-9r2q-6jq7-9fj3: On versions 15
ghsa_unreviewed·2022-05-24
CVE-2020-5881 [MEDIUM] GHSA-9r2q-6jq7-9fj3: On versions 15
On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when the BIG-IP Virtual Edition (VE) is configured with VLAN groups and there are devices configured with OSPF connected to it, the Network Device Abstraction Layer (NDAL) Interfaces can lock up and in turn disrupting the communication between the mcpd and tmm processes.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-04-30
Published