CVE-2022-41813

Published: Oct 19, 2022Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when BIG-IP is provisioned with PEM or AFM module, an undisclosed input can cause Traffic Management Microkernel (TMM) to terminate.

Affected (8)

Products: F5: Big Ip Advanced Firewall Manager, Big Ip Policy Enforcement Manager

2 products

Big Ip Advanced Firewall Manager

Big Ip Policy Enforcement Manager

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Advanced Firewall Manager	13.1.0 ≤ version ≤ 13.1.5
F5 Big Ip Advanced Firewall Manager	14.1.0 ≤ version < 14.1.5
F5 Big Ip Advanced Firewall Manager	15.1.0 ≤ version < 15.1.6.1
F5 Big Ip Advanced Firewall Manager	16.1.0 ≤ version < 16.1.3.1
F5 Big Ip Policy Enforcement Manager	13.1.0 ≤ version ≤ 13.1.5
F5 Big Ip Policy Enforcement Manager	14.1.0 ≤ version < 14.1.5
F5 Big Ip Policy Enforcement Manager	15.1.0 ≤ version < 15.1.6.1
F5 Big Ip Policy Enforcement Manager	16.1.0 ≤ version < 16.1.3.1

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://support.f5.com/csp/article/K93723284

Source: f5sirt@f5.com

MitigationVendor Advisory

https://support.f5.com/csp/article/K93723284

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationVendor Advisory

Timeline

No history available yet.