CVE-2020-5869: F5 BIG-IQ Centralized Management

Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days.

In BIG-IQ 5.2.0-7.0.0, high availability (HA) synchronization is not secure by TLS and may allow on-path attackers to read / modify confidential data in transit.

Affected products

• F5 BIG-IQ Centralized Management: from 5.2.0, up to and including 5.4.0; from 6.0.0, up to and including 6.1.0; from 7.0.0, before 7.1.0 (fixed in 7.1.0)

Published 2020-04-24. Last modified 2026-06-17.