CVE-2020-5887: 
F5 BIG-IP Advanced Firewall Manager vulnerability analysis and mitigation

CVE-2020-5887 is a security vulnerability affecting BIG-IP Virtual Edition (VE) versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3. The vulnerability was discovered and disclosed in early 2020, with the CVE being assigned on January 6, 2020, and publicly disclosed on April 30, 2020 (NVD).

The vulnerability allows remote attackers to access local daemons and bypass port lockdown settings in BIG-IP Virtual Edition (VE). The severity of this vulnerability is rated as Critical with a CVSS v3.1 Base Score of 9.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). The vulnerability is classified under CWE-668 (Exposure of Resource to Wrong Sphere) (NVD).

The vulnerability can allow remote attackers to gain unauthorized access to local daemons and bypass security controls, specifically port lockdown settings. This could potentially lead to high-level compromise of confidentiality and integrity of the affected systems (NVD).

The vulnerability has a low attack complexity (AC:L) and requires no privileges (PR:N) or user interaction (UI:N) to exploit, making it highly exploitable. The attack vector is network-based (AV:N), allowing for remote exploitation (NVD).

F5 Networks has released security patches for the affected versions. Users should upgrade to patched versions of the BIG-IP Virtual Edition software (F5 Advisory).