Show vulnerabilities with patch / with exploit

Incorrect integrity check in BIG-IP TMM



Published: 2020-01-14
Severity Low
Patch available YES
Number of vulnerabilities 1
CVE ID CVE-2020-5851
CWE ID CWE-354
Exploitation vector Local
Public exploit N/A
Vulnerable software
Subscribe
BIG-IP
Hardware solutions / Firmware

Vendor F5 Networks, Inc.

Security Advisory

This security advisory describes one low risk vulnerability.

1) Improper validation of integrity check value

Severity: Low

CVSSv3: 4 [CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-5851

CWE-ID: CWE-354 - Improper Validation of Integrity Check Value

Exploit availability: No

Description

The vulnerability allows an attacker to hide malicious activity.

The Trusted Platform Module (TPM) on the BIG-IP iSeries platforms (i850, i2000, i4000, i5000, i7000, i10000, i11000, i15000) and the VIPRION B4450 blades fails to function properly and is unable to detect any potential security compromise of the affected systems.

Mitigation

This vulnerability affects only the following items: these engineering hotfixes based on BIG-IP 14.1.0.2; BIG-IP iSeries platforms; and VIPRION B4450 blades.

Vulnerable software versions

BIG-IP: Hotfix-BIGIP-14.1.0.2.0.45.4-ENG, Hotfix-BIGIP-14.1.0.2.0.62.4-ENG

CPE External links

https://support.f5.com/csp/article/K91171450

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.