CVE-2020-5888: 
F5 BIG-IP Advanced Firewall Manager vulnerability analysis and mitigation

CVE-2020-5888 is a security vulnerability affecting BIG-IP Virtual Edition (VE) versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3. The vulnerability was discovered and disclosed in April 2020, impacting multiple F5 BIG-IP products including Access Policy Manager, Advanced Firewall Manager, Analytics, Application Security Manager, and several other modules (NVD).

The vulnerability allows adjacent network (layer 2) attackers to access local daemons and bypass port lockdown settings. The vulnerability has been assigned a CVSS v3.1 base score of 8.1 (HIGH) with the vector string CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N, indicating adjacent network access vector, low attack complexity, no privileges required, and no user interaction needed (NVD).

The vulnerability can lead to unauthorized access to local daemons and the ability to bypass security controls, specifically port lockdown settings. This could potentially result in high impacts to both confidentiality and integrity of the affected systems (NVD).

The vulnerability requires an attacker to have adjacent network (layer 2) access to the target system. The attack complexity is considered low, requiring no special privileges or user interaction to exploit (NVD).

F5 Networks has released security updates to address this vulnerability. Users should upgrade to versions 14.1.2.4, 15.0.1.3, or 15.1.0.2 depending on their current version (F5 Advisory).