CVE-2020-5862

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-03-27 · updated 2026-06-17

Description

On BIG-IP 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.2, under certain conditions, TMM may crash or stop processing new traffic with the DPDK/ENA driver on AWS systems while sending traffic. This issue does not affect any other platforms, hardware or virtual, or any other cloud provider since the affected driver is specific to AWS.

Affected products

F5 BIG-IP APM: from 14.1.0 through 14.1.2.2; from 15.0.0 through 15.0.1.1; from 15.1.0 through 15.1.0.1
BIG-IP: from 14.1.0 through 14.1.2; from 15.0.0 through 15.0.1.1; from 15.1.0 through 15.1.0.1
F5 Big-Ip Analytics: from 14.1.0 through 14.1.2; from 15.0.0 through 15.0.1.1; from 15.1.0 through 15.1.0.1
F5 Networks, Inc. BIG-IP (AAM): from 14.1.0 through 14.1.2; from 15.0.0 through 15.0.1.1; from 15.1.0 through 15.1.0.1
BIG-IP ASM: from 14.1.0 through 14.1.2; from 15.0.0 through 15.0.1.1; from 15.1.0 through 15.1.0.1
F5 BIG-IP DNS: from 14.1.0 through 14.1.2; from 15.0.0 through 15.0.1.1; from 15.1.0 through 15.1.0.1
F5 Big-Ip Fraud Protection Service: from 14.1.0 through 14.1.2; from 15.0.0 through 15.0.1.1; from 15.1.0 through 15.1.0.1
F5 Big-Ip Global Traffic Manager: from 14.1.0 through 14.1.2; from 15.0.0 through 15.0.1.1; from 15.1.0 through 15.1.0.1
F5 Big-Ip Link Controller: from 14.1.0 through 14.1.2; from 15.0.0 through 15.0.1.1; from 15.1.0 through 15.1.0.1
F5 BIG-IP (LTM): from 14.1.0 through 14.1.2; from 15.0.0 through 15.0.1.1; from 15.1.0 through 15.1.0.1
F5 Networks, Inc. BIG-IP (PEM): from 14.1.0 through 14.1.2; from 15.0.0 through 15.0.1.1; from 15.1.0 through 15.1.0.1

References

Get alerted when CVE-2020-5862 or the next vulnerability affects your stack