CVE-2020-5949

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 13.1.0 through 13.1.3.4 F5 BIG-IP versions 14.0.0 through 14.0.1

Description A certain traffic pattern sent to a virtual server configured with an FTP profile can cause the FTP channel to break.

Recommendations For F5 BIG-IP versions 13.1.0 through 13.1.3.4, consider restricting access to the FTP profile until a patch is available. For F5 BIG-IP versions 14.0.0 through 14.0.1, consider restricting access to the FTP profile until a patch is available. As a temporary workaround, consider disabling the FTP profile on virtual servers to minimize the risk of exploitation.