Show vulnerabilities with patch / with exploit

Incorrect integrity check in BIG-IP TMM

Published: 2020-01-14
Severity Low
Patch available YES
Number of vulnerabilities 1
CVE ID CVE-2020-5851
Exploitation vector Local
Public exploit N/A
Vulnerable software
Hardware solutions / Firmware

Vendor F5 Networks, Inc.

Security Advisory

This security advisory describes one low risk vulnerability.

1) Improper validation of integrity check value

Severity: Low


CVE-ID: CVE-2020-5851

CWE-ID: CWE-354 - Improper Validation of Integrity Check Value

Exploit availability: No


The vulnerability allows an attacker to hide malicious activity.

The Trusted Platform Module (TPM) on the BIG-IP iSeries platforms (i850, i2000, i4000, i5000, i7000, i10000, i11000, i15000) and the VIPRION B4450 blades fails to function properly and is unable to detect any potential security compromise of the affected systems.


This vulnerability affects only the following items: these engineering hotfixes based on BIG-IP; BIG-IP iSeries platforms; and VIPRION B4450 blades.

Vulnerable software versions

BIG-IP: Hotfix-BIGIP-, Hotfix-BIGIP-

CPE External links

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.