CVE-2020-5939: 
F5 BIG-IP Advanced Firewall Manager vulnerability analysis and mitigation

In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.3, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, and 13.1.0-13.1.3.4, BIG-IP Virtual Edition (VE) systems on VMware, with an Intel-based 85299 Network Interface Controller (NIC) card and Single Root I/O Virtualization (SR-IOV) enabled on vSphere, may experience a critical failure. This vulnerability was disclosed on November 5, 2020, and has been assigned CVE-2020-5939 (NVD).

The vulnerability has been assessed with a CVSS v3.1 Base Score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. Under CVSS v2.0, it received a Base Score of 4.3 (MEDIUM) with the vector (AV:N/AC:M/Au:N/C:N/I:N/A:P). The vulnerability specifically affects the Traffic Management Microkernel (TMM) component, potentially leaving it in a state where it cannot transmit traffic (NVD).

When exploited, this vulnerability can cause the Traffic Management Microkernel (TMM) to enter a state where it becomes unable to transmit traffic, effectively resulting in a denial of service condition for the affected BIG-IP Virtual Edition systems (NVD).

F5 has released patched versions to address this vulnerability. Users are advised to upgrade to versions 14.1.2.8, 15.1.1, or 16.0.1 or later depending on their current version track (CERT-FR).