CVE-2020-5942: High severity f5 big-ip policy enforcement manager vulnerability
In BIG-IP PEM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when processing Capabilities-Exchange-Answer (CEA) packets with certain attributes from the Policy and Charging Rules Function (PCRF) server, the Traffic Management Microkernel (TMM) may generate a core file and restart.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-5942?
The severity of CVE-2020-5942 is classified as critical due to the potential for remote code execution.
How do I fix CVE-2020-5942?
To fix CVE-2020-5942, update your F5 BIG-IP Policy Enforcement Manager to a version that is not affected by this vulnerability.
What versions are affected by CVE-2020-5942?
CVE-2020-5942 affects F5 BIG-IP Policy Enforcement Manager versions 11.6.1 to 11.6.5.2, 12.1.0 to 12.1.5.2, 13.1.0 to 13.1.3.4, 14.1.0 to 14.1.2.7, 15.1.0 to 15.1.0.5, and 16.0.0 to 16.0.0.1.
What are the risks of not addressing CVE-2020-5942?
Failing to address CVE-2020-5942 may leave your system vulnerable to unauthorized access and potential exploitation.
Is there a workaround for CVE-2020-5942?
Currently, the recommended action for CVE-2020-5942 is to apply the necessary software updates, as no effective workaround has been disclosed.