← Back

CVE-2022-41813

nvd nist
Published: Oct 19, 2022Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when BIG-IP is provisioned with PEM or AFM module, an undisclosed input can cause Traffic Management Microkernel (TMM) to terminate.

Affected (8)

F5
2 products
Big Ip Advanced Firewall Manager
Big Ip Policy Enforcement Manager
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
F5
Big Ip Advanced Firewall Manager
From 13.1.0 to 13.1.5
Big Ip Advanced Firewall Manager
From 14.1.0 to 14.1.5
Big Ip Advanced Firewall Manager
From 15.1.0 to 15.1.6.1
Big Ip Advanced Firewall Manager
From 16.1.0 to 16.1.3.1
F5
Big Ip Policy Enforcement Manager
From 13.1.0 to 13.1.5
Big Ip Policy Enforcement Manager
From 14.1.0 to 14.1.5
Big Ip Policy Enforcement Manager
From 15.1.0 to 15.1.6.1
Big Ip Policy Enforcement Manager
From 16.1.0 to 16.1.3.1

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: f5sirt@f5.com
MitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory

Timeline

No history available yet.