CVE-2020-5852

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-01-14 · updated 2026-06-17

Description

Undisclosed traffic patterns received may cause a disruption of service to the Traffic Management Microkernel (TMM). This vulnerability affects TMM through a virtual server configured with a FastL4 profile. Traffic processing is disrupted while TMM restarts. This issue only impacts specific engineering hotfixes. NOTE: This vulnerability does not affect any of the BIG-IP major, minor or maintenance releases you obtained from downloads.f5.com. The affected Engineering Hotfix builds are as follows: Hotfix-BIGIP-14.1.2.1.0.83.4-ENG Hotfix-BIGIP-12.1.4.1.0.97.6-ENG Hotfix-BIGIP-11.5.4.2.74.291-HF2

Affected products

F5 BIG-IP APM: 11.5.4.2.74.291, 12.1.4.1.0.97.6, 14.1.2.1.0.83.4
BIG-IP: 11.5.4.2.74.291, 12.1.4.1.0.97.6, 14.1.2.1.0.83.4
F5 Big-Ip Analytics: 11.5.4.2.74.291, 12.1.4.1.0.97.6, 14.1.2.1.0.83.4
F5 Networks, Inc. BIG-IP (AAM): 11.5.4.2.74.291, 12.1.4.1.0.97.6, 14.1.2.1.0.83.4
BIG-IP ASM: 11.5.4.2.74.291, 12.1.4.1.0.97.6, 14.1.2.1.0.83.4
F5 BIG-IP DNS: 11.5.4.2.74.291, 12.1.4.1.0.97.6, 14.1.2.1.0.83.4
F5 Big-Ip Edge Gateway: 11.5.4.2.74.291, 12.1.4.1.0.97.6, 14.1.2.1.0.83.4
F5 Big-Ip Fraud Protection Service: 11.5.4.2.74.291, 12.1.4.1.0.97.6, 14.1.2.1.0.83.4
F5 Big-Ip Global Traffic Manager: 11.5.4.2.74.291, 12.1.4.1.0.97.6, 14.1.2.1.0.83.4
F5 Big-Ip Link Controller: 11.5.4.2.74.291, 12.1.4.1.0.97.6, 14.1.2.1.0.83.4
F5 BIG-IP (LTM): 11.5.4.2.74.291, 12.1.4.1.0.97.6, 14.1.2.1.0.83.4
F5 Networks, Inc. BIG-IP (PEM): 11.5.4.2.74.291, 12.1.4.1.0.97.6, 14.1.2.1.0.83.4
F5 Big-Ip Webaccelerator: 11.5.4.2.74.291, 12.1.4.1.0.97.6, 14.1.2.1.0.83.4

References

Get alerted when CVE-2020-5852 or the next vulnerability affects your stack