CVE-2020-5938

🗓️ 29 Oct 2020 14:15:12Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 15 Views

When negotiating IPSec tunnels, BIG-IP allows different key lengt

Reporter	Title	Published	Views	Family All 10
CNVD	F5 BIG-IP Security Bypass Vulnerability	29 Oct 202000:00	–	cnvd
CVE	CVE-2020-5938	29 Oct 202013:29	–	cve
Cvelist	CVE-2020-5938	29 Oct 202013:29	–	cvelist
EUVD	EUVD-2020-27092	7 Oct 202500:30	–	euvd
F5 Networks	K76610106: F5 IPsec vulnerability CVE-2020-5938	21 Feb 202318:33	–	f5
Tenable Nessus	F5 Networks BIG-IP : F5 IPsec vulnerability (K76610106)	29 Oct 202000:00	–	nessus
NCSC	Vulnerabilities fixed in F5 BIG-IP	29 Oct 202000:00	–	ncsc
OSV	CVE-2020-5938	29 Oct 202014:15	–	osv
Prion	Design/Logic Flaw	29 Oct 202014:15	–	prion
RedhatCVE	CVE-2020-5938	22 May 202516:44	–	redhatcve

NVD

Node

f5 big-ip_access_policy_managerRange11.6.1–11.6.5.2

OR

f5 big-ip_access_policy_managerRange12.1.0–12.1.5.2

OR

f5 big-ip_access_policy_managerRange13.1.0–13.1.3.4

OR

f5 big-ip_advanced_firewall_managerRange11.6.1–11.6.5.2

OR

f5 big-ip_advanced_firewall_managerRange12.1.0–12.1.5.2

OR

f5 big-ip_advanced_firewall_managerRange13.1.0–13.1.3.4

OR

f5 big-ip_advanced_web_application_firewallRange11.6.1–11.6.5.2

OR

f5 big-ip_advanced_web_application_firewallRange12.1.0–12.1.5.2

OR

f5 big-ip_advanced_web_application_firewallRange13.1.0–13.1.3.4

OR

f5 big-ip_analyticsRange11.6.1–11.6.5.2

OR

f5 big-ip_analyticsRange12.1.0–12.1.5.2

OR

f5 big-ip_analyticsRange13.1.0–13.1.3.4

OR

f5 big-ip_application_acceleration_managerRange11.6.1–11.6.5.2

OR

f5 big-ip_application_acceleration_managerRange12.1.0–12.1.5.2

OR

f5 big-ip_application_acceleration_managerRange13.1.0–13.1.3.4

OR

f5 big-ip_application_security_managerRange11.6.1–11.6.5.2

OR

f5 big-ip_application_security_managerRange12.1.0–12.1.5.2

OR

f5 big-ip_application_security_managerRange13.1.0–13.1.3.4

OR

f5 big-ip_ddos_hybrid_defenderRange11.6.1–11.6.5.2

OR

f5 big-ip_ddos_hybrid_defenderRange12.1.0–12.1.5.2

OR

f5 big-ip_ddos_hybrid_defenderRange13.1.0–13.1.3.4

OR

f5 big-ip_domain_name_systemRange11.6.1–11.6.5.2

OR

f5 big-ip_domain_name_systemRange12.1.0–12.1.5.2

OR

f5 big-ip_domain_name_systemRange13.1.0–13.1.3.4

OR

f5 big-ip_fraud_protection_serviceRange11.6.1–11.6.5.2

OR

f5 big-ip_fraud_protection_serviceRange12.1.0–12.1.5.2

OR

f5 big-ip_fraud_protection_serviceRange13.1.0–13.1.3.4

OR

f5 big-ip_global_traffic_managerRange11.6.1–11.6.5.2

OR

f5 big-ip_global_traffic_managerRange12.1.0–12.1.5.2

OR

f5 big-ip_global_traffic_managerRange13.1.0–13.1.3.4

OR

f5 big-ip_link_controllerRange11.6.1–11.6.5.2

OR

f5 big-ip_link_controllerRange12.1.0–12.1.5.2

OR

f5 big-ip_link_controllerRange13.1.0–13.1.3.4

OR

f5 big-ip_local_traffic_managerRange11.6.1–11.6.5.2

OR

f5 big-ip_local_traffic_managerRange12.1.0–12.1.5.2

OR

f5 big-ip_local_traffic_managerRange13.1.0–13.1.3.4

OR

f5 big-ip_policy_enforcement_managerRange11.6.1–11.6.5.2

OR

f5 big-ip_policy_enforcement_managerRange12.1.0–12.1.5.2

OR

f5 big-ip_policy_enforcement_managerRange13.1.0–13.1.3.4

OR

f5 ssl_orchestratorRange11.6.1–11.6.5.2

OR

f5 ssl_orchestratorRange12.1.0–12.1.5.2

OR

f5 ssl_orchestratorRange13.1.0–13.1.3.4

Source	Link
support	www.support.f5.com/csp/article/K76610106

17 Jun 2026 03:22Current

6.5Medium risk

Vulners AI Score6.5

CVSS 24

CVSS 3.16.5

EPSS0.00523

big-ip ipsec key length negotiation