CVE-2020-5938

CWE-3264 documents4 sources
Severity
6.5MEDIUM
EPSS
0.1%
top 68.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
14
F5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced WEB Application Firewall+11 more
Timeline
PublishedOct 29
Latest updateMay 24

Description

On BIG-IP 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when negotiating IPSec tunnels with configured, authenticated peers, the peer may negotiate a different key length than the BIG-IP configuration would otherwise allow.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages15 packages

▶NVDf5/big-ip_analytics11.6.1 — 11.6.5.2+2
▶NVDf5/ssl_orchestrator11.6.1 — 11.6.5.2+2
▶NVDf5/big-ip_link_controller11.6.1 — 11.6.5.2+2
▶NVDf5/big-ip_domain_name_system11.6.1 — 11.6.5.2+2
▶NVDf5/big-ip_ddos_hybrid_defender11.6.1 — 11.6.5.2+2

🔴Vulnerability Details

2
GHSA
GHSA-4h4h-mcvx-ffv6: On BIG-IP 13↗2022-05-24
▶
CVEList
CVE-2020-5938: On BIG-IP 13↗2020-10-29
▶

📋Vendor Advisories

1
F5
CVE-2020-5938: On BIG-IP 13↗2020-10-29
▶
CVE-2020-5938 (MEDIUM CVSS 6.5) | On BIG-IP 13.1.0-13.1.3.4 | cvebase.io