Incorrect integrity check in BIG-IP TMM

1) Improper validation of integrity check value

EUVDB-ID: #VU24238

Risk: Low

CVSSv3.1: 4 [CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-5851

CWE-ID: CWE-354 - Improper Validation of Integrity Check Value

Exploit availability: No

Description

The vulnerability allows an attacker to hide malicious activity.

The Trusted Platform Module (TPM) on the BIG-IP iSeries platforms (i850, i2000, i4000, i5000, i7000, i10000, i11000, i15000) and the VIPRION B4450 blades fails to function properly and is unable to detect any potential security compromise of the affected systems.

Mitigation

This vulnerability affects only the following items: these engineering hotfixes based on BIG-IP 14.1.0.2; BIG-IP iSeries platforms; and VIPRION B4450 blades.

Vulnerable software versions

BIG-IP: 14.1.0.2.0.45.4 Hotfix-ENG - 14.1.0.2.0.62.4 Hotfix-ENG

External links

http://support.f5.com/csp/article/K91171450

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.