CVE-2020-5925: 
F5 BIG-IP Advanced Firewall Manager vulnerability analysis and mitigation

CVE-2020-5925 is a vulnerability affecting F5's BIG-IP systems discovered in 2020. The vulnerability affects multiple versions of BIG-IP including versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1. The issue involves undisclosed internally generated UDP traffic that can cause the Traffic Management Microkernel (TMM) to restart under certain circumstances (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. Under CVSS v2.0, it received a base score of 4.3 (MEDIUM) with the vector (AV:N/AC:M/Au:N/C:N/I:N/A:P). The vulnerability is classified under CWE-754 (Improper Check for Unusual or Exceptional Conditions) (NVD).

The primary impact of this vulnerability is on system availability, as it can cause the Traffic Management Microkernel (TMM) to restart, potentially leading to service disruption. The CVSS scores indicate that while there are no direct impacts on confidentiality or integrity, the vulnerability can significantly affect system availability (NVD).

The vulnerability is network-accessible (AV:N) with medium attack complexity (AC:M) and requires no authentication (Au:N) according to the CVSS v2.0 scoring. The v3.1 scoring indicates low attack complexity (AC:L) with no privileges required (PR:N) and no user interaction needed (UI:N) (NVD).

F5 has released patched versions to address this vulnerability. Users should upgrade to versions 11.6.5.2, 12.1.5.2, 13.1.3.4, 14.1.2.7, 15.0.1.4, or 15.1.0.5 depending on their current version (Rapid7).