CVE-2020-5942
First published: Thu Nov 05 2020(Updated: )
In BIG-IP PEM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when processing Capabilities-Exchange-Answer (CEA) packets with certain attributes from the Policy and Charging Rules Function (PCRF) server, the Traffic Management Microkernel (TMM) may generate a core file and restart.
Credit: f5sirt@f5.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| F5 BIG-IP Policy Enforcement Manager | >=11.6.1<=11.6.5.2 | |
| F5 BIG-IP Policy Enforcement Manager | >=12.1.0<=12.1.5.2 | |
| F5 BIG-IP Policy Enforcement Manager | >=13.1.0<=13.1.3.4 | |
| F5 BIG-IP Policy Enforcement Manager | >=14.1.0<14.1.2.8 | |
| F5 BIG-IP Policy Enforcement Manager | >=15.1.0<15.1.1 | |
| F5 BIG-IP Policy Enforcement Manager | >=16.0.0<16.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-5942?
The severity of CVE-2020-5942 is classified as critical due to the potential for remote code execution.
How do I fix CVE-2020-5942?
To fix CVE-2020-5942, update your F5 BIG-IP Policy Enforcement Manager to a version that is not affected by this vulnerability.
What versions are affected by CVE-2020-5942?
CVE-2020-5942 affects F5 BIG-IP Policy Enforcement Manager versions 11.6.1 to 11.6.5.2, 12.1.0 to 12.1.5.2, 13.1.0 to 13.1.3.4, 14.1.0 to 14.1.2.7, 15.1.0 to 15.1.0.5, and 16.0.0 to 16.0.0.1.
What are the risks of not addressing CVE-2020-5942?
Failing to address CVE-2020-5942 may leave your system vulnerable to unauthorized access and potential exploitation.
Is there a workaround for CVE-2020-5942?
Currently, the recommended action for CVE-2020-5942 is to apply the necessary software updates, as no effective workaround has been disclosed.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/last-modified-date
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/f5
- canonical/f5 big-ip policy enforcement manager
- version/f5 big-ip policy enforcement manager/11.6.1
- version/f5 big-ip policy enforcement manager/11.6.5.2
- version/f5 big-ip policy enforcement manager/12.1.0
- version/f5 big-ip policy enforcement manager/12.1.5.2
- version/f5 big-ip policy enforcement manager/13.1.0
- version/f5 big-ip policy enforcement manager/13.1.3.4
- version/f5 big-ip policy enforcement manager/14.1.0
- version/f5 big-ip policy enforcement manager/15.1.0
- version/f5 big-ip policy enforcement manager/16.0.0