Vulnerability identifier: #VU24238

Vulnerability risk: Low

CVSSv3.1: 4 [CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-5851

CWE-ID: CWE-354

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
BIG-IP
Hardware solutions / Firmware

Vendor: F5 Networks

Description

The vulnerability allows an attacker to hide malicious activity.

The Trusted Platform Module (TPM) on the BIG-IP iSeries platforms (i850, i2000, i4000, i5000, i7000, i10000, i11000, i15000) and the VIPRION B4450 blades fails to function properly and is unable to detect any potential security compromise of the affected systems.

Mitigation
This vulnerability affects only the following items: these engineering hotfixes based on BIG-IP 14.1.0.2; BIG-IP iSeries platforms; and VIPRION B4450 blades.

Vulnerable software versions

BIG-IP: 14.1.0.2.0.45.4 Hotfix-ENG - 14.1.0.2.0.62.4 Hotfix-ENG

---

External links
http://support.f5.com/csp/article/K91171450

---

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.