CVE-2020-5947

2020-11-1900:14:19

www.cve.org

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

In versions 16.0.0-16.0.0.1 and 15.1.0-15.1.1, on specific BIG-IP platforms, attackers may be able to obtain TCP sequence numbers from the BIG-IP system that can be reused in future connections with the same source and destination port and IP numbers. Only these platforms are affected: BIG-IP 2000 series (C112), BIG-IP 4000 series (C113), BIG-IP i2000 series (C117), BIG-IP i4000 series (C115), BIG-IP Virtual Edition (VE).

CNA Affected

[
  {
    "product": "BIG-IP 2000 series (C112), BIG-IP 4000 series (C113), BIG-IP i2000 series (C117), BIG-IP i4000 series (C115), BIG-IP Virtual Edition (VE)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "16.0.0-16.0.0.1"
      },
      {
        "status": "affected",
        "version": "15.1.0-15.1.1"
      }
    ]
  }
]

References

support.f5.com/csp/article/K64571774