csaf_ncscnl - ncsc-2025-0147

ncsc-2025-0147

Vulnerability from csaf_ncscnl

Published

2025-05-09 08:07

Modified

2025-05-09 08:07

Summary

Kwetsbaarheden verholpen in F5 BIG-IP

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten

F5 heeft kwetsbaarheden verholpen in de BIG-IP systemen.

Interpretaties

De kwetsbaarheden bevinden zich in verschillende configuraties van de BIG-IP systemen, waaronder het Traffic Management Microkernel (TMM) dat kan worden beëindigd door ongepubliceerde verzoeken. Dit kan leiden tot prestatie- en stabiliteitsproblemen, vooral voor softwareversies die End of Technical Support (EoTS) hebben bereikt. De kwetsbaarheden kunnen ook leiden tot ongeautoriseerde toegang en privilege-escalatie voor gebruikers, wat de beveiliging van de systemen in gevaar kan brengen.

Oplossingen

F5 heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Kans

medium

Schade

high

CWE-125

Out-of-bounds Read

CWE-404

Improper Resource Shutdown or Release

CWE-476

NULL Pointer Dereference

CWE-770

Allocation of Resources Without Limits or Throttling

CWE-863

Incorrect Authorization

CWE-787

Out-of-bounds Write

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "F5 heeft kwetsbaarheden verholpen in de BIG-IP systemen.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden bevinden zich in verschillende configuraties van de BIG-IP systemen, waaronder het Traffic Management Microkernel (TMM) dat kan worden be\u00ebindigd door ongepubliceerde verzoeken. Dit kan leiden tot prestatie- en stabiliteitsproblemen, vooral voor softwareversies die End of Technical Support (EoTS) hebben bereikt. De kwetsbaarheden kunnen ook leiden tot ongeautoriseerde toegang en privilege-escalatie voor gebruikers, wat de beveiliging van de systemen in gevaar kan brengen.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "F5 heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Improper Resource Shutdown or Release",
        "title": "CWE-404"
      },
      {
        "category": "general",
        "text": "NULL Pointer Dereference",
        "title": "CWE-476"
      },
      {
        "category": "general",
        "text": "Allocation of Resources Without Limits or Throttling",
        "title": "CWE-770"
      },
      {
        "category": "general",
        "text": "Incorrect Authorization",
        "title": "CWE-863"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Write",
        "title": "CWE-787"
      },
      {
        "category": "general",
        "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
        "title": "CWE-120"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
        "title": "CWE-77"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://my.f5.com/manage/s/article/K000139503"
      },
      {
        "category": "external",
        "summary": "Reference - certbundde; cveprojectv5; nvd",
        "url": "https://my.f5.com/manage/s/article/K000140968"
      },
      {
        "category": "external",
        "summary": "Reference - certbundde; cveprojectv5; nvd",
        "url": "https://my.f5.com/manage/s/article/K000150668"
      },
      {
        "category": "external",
        "summary": "Reference - certbundde; cveprojectv5; nvd",
        "url": "https://my.f5.com/manage/s/article/K000140937"
      },
      {
        "category": "external",
        "summary": "Reference - certbundde; cveprojectv5; nvd",
        "url": "https://my.f5.com/manage/s/article/K000137709"
      },
      {
        "category": "external",
        "summary": "Reference - certbundde; cveprojectv5; nvd",
        "url": "https://my.f5.com/manage/s/article/K000150598"
      },
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://my.f5.com/manage/s/article/K000140574"
      },
      {
        "category": "external",
        "summary": "Reference - certbundde; cveprojectv5; nvd",
        "url": "https://my.f5.com/manage/s/article/K000139571"
      },
      {
        "category": "external",
        "summary": "Reference - certbundde; cveprojectv5; nvd",
        "url": "https://my.f5.com/manage/s/article/K000140919"
      },
      {
        "category": "external",
        "summary": "Reference - certbundde; cveprojectv5; nvd",
        "url": "https://my.f5.com/manage/s/article/K000149952"
      },
      {
        "category": "external",
        "summary": "Reference - certbundde; cveprojectv5; nvd",
        "url": "https://my.f5.com/manage/s/article/K000148591"
      }
    ],
    "title": "Kwetsbaarheden verholpen in F5 BIG-IP",
    "tracking": {
      "current_release_date": "2025-05-09T08:07:32.002935Z",
      "generator": {
        "date": "2025-02-25T15:15:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.0"
        }
      },
      "id": "NCSC-2025-0147",
      "initial_release_date": "2025-05-09T08:07:32.002935Z",
      "revision_history": [
        {
          "date": "2025-05-09T08:07:32.002935Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.1.0|\u003c*",
                "product": {
                  "name": "vers:unknown/15.1.0|\u003c*",
                  "product_id": "CSAFPID-1968134"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.1.0|\u003c15.1.9",
                "product": {
                  "name": "vers:unknown/15.1.0|\u003c15.1.9",
                  "product_id": "CSAFPID-2554790"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.1.0|\u003c*",
                "product": {
                  "name": "vers:unknown/16.1.0|\u003c*",
                  "product_id": "CSAFPID-1968133"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.1.0|\u003c16.1.4",
                "product": {
                  "name": "vers:unknown/16.1.0|\u003c16.1.4",
                  "product_id": "CSAFPID-2554789"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.1.0|\u003c16.1.5",
                "product": {
                  "name": "vers:unknown/16.1.0|\u003c16.1.5",
                  "product_id": "CSAFPID-1968135"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.1.0|\u003c16.1.6",
                "product": {
                  "name": "vers:unknown/16.1.0|\u003c16.1.6",
                  "product_id": "CSAFPID-2819236"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.1.0|\u003c17.1.1",
                "product": {
                  "name": "vers:unknown/17.1.0|\u003c17.1.1",
                  "product_id": "CSAFPID-2554788"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.1.0|\u003c17.1.2",
                "product": {
                  "name": "vers:unknown/17.1.0|\u003c17.1.2",
                  "product_id": "CSAFPID-1968132"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.1.0|\u003c17.1.2.2",
                "product": {
                  "name": "vers:unknown/17.1.0|\u003c17.1.2.2",
                  "product_id": "CSAFPID-2819231"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.5.0|\u003c*",
                "product": {
                  "name": "vers:unknown/17.5.0|\u003c*",
                  "product_id": "CSAFPID-2819224"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.1.0|\u003c15.1.10.7",
                "product": {
                  "name": "vers:unknown/15.1.0|\u003c15.1.10.7",
                  "product_id": "CSAFPID-2819237"
                }
              }
            ],
            "category": "product_name",
            "name": "BIG-IP"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/20.0.1|\u003c20.2.1",
                "product": {
                  "name": "vers:unknown/20.0.1|\u003c20.2.1",
                  "product_id": "CSAFPID-2819225"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/20.2.0|\u003c20.3.0",
                "product": {
                  "name": "vers:unknown/20.2.0|\u003c20.3.0",
                  "product_id": "CSAFPID-2819238"
                }
              }
            ],
            "category": "product_name",
            "name": "BIG-IP Next"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/1.1.0|\u003c*",
                "product": {
                  "name": "vers:unknown/1.1.0|\u003c*",
                  "product_id": "CSAFPID-2819240"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/1.1.0|\u003c1.3.0",
                "product": {
                  "name": "vers:unknown/1.1.0|\u003c1.3.0",
                  "product_id": "CSAFPID-2819229"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/1.1.0|\u003c1.4.0",
                "product": {
                  "name": "vers:unknown/1.1.0|\u003c1.4.0",
                  "product_id": "CSAFPID-2042748"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/2.0.0|\u003c*",
                "product": {
                  "name": "vers:unknown/2.0.0|\u003c*",
                  "product_id": "CSAFPID-2819228"
                }
              }
            ],
            "category": "product_name",
            "name": "BIG-IP Next CNF"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/1.7.0|\u003c*",
                "product": {
                  "name": "vers:unknown/1.7.0|\u003c*",
                  "product_id": "CSAFPID-2819239"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/1.7.0|\u003c1.7.12",
                "product": {
                  "name": "vers:unknown/1.7.0|\u003c1.7.12",
                  "product_id": "CSAFPID-2819227"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/1.7.0|\u003c1.7.9",
                "product": {
                  "name": "vers:unknown/1.7.0|\u003c1.7.9",
                  "product_id": "CSAFPID-2819230"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/1.8.0|\u003c2.0.0",
                "product": {
                  "name": "vers:unknown/1.8.0|\u003c2.0.0",
                  "product_id": "CSAFPID-2819226"
                }
              }
            ],
            "category": "product_name",
            "name": "BIG-IP Next SPK"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/1.5.1|\u003c1.5.2",
                "product": {
                  "name": "vers:unknown/1.5.1|\u003c1.5.2",
                  "product_id": "CSAFPID-2819235"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/1.5.1|\u003c1.5.3",
                "product": {
                  "name": "vers:unknown/1.5.1|\u003c1.5.3",
                  "product_id": "CSAFPID-2819241"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/1.7.0|\u003c1.8.0",
                "product": {
                  "name": "vers:unknown/1.7.0|\u003c1.8.0",
                  "product_id": "CSAFPID-2819234"
                }
              }
            ],
            "category": "product_name",
            "name": "F5OS - Appliance"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/1.6.0|\u003c1.8.0",
                "product": {
                  "name": "vers:unknown/1.6.0|\u003c1.8.0",
                  "product_id": "CSAFPID-2819233"
                }
              }
            ],
            "category": "product_name",
            "name": "F5OS - Chassis"
          }
        ],
        "category": "vendor",
        "name": "F5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-35995",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1968134",
          "CSAFPID-2554790",
          "CSAFPID-1968133",
          "CSAFPID-2554789",
          "CSAFPID-1968135",
          "CSAFPID-2819236",
          "CSAFPID-2554788",
          "CSAFPID-1968132",
          "CSAFPID-2819231",
          "CSAFPID-2819224",
          "CSAFPID-2819225",
          "CSAFPID-2819238",
          "CSAFPID-2819240",
          "CSAFPID-2819229",
          "CSAFPID-2042748",
          "CSAFPID-2819228",
          "CSAFPID-2819239",
          "CSAFPID-2819227",
          "CSAFPID-2819230",
          "CSAFPID-2819226",
          "CSAFPID-2819235",
          "CSAFPID-2819241",
          "CSAFPID-2819234",
          "CSAFPID-2819233",
          "CSAFPID-2819237"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-35995",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-35995.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1968134",
            "CSAFPID-2554790",
            "CSAFPID-1968133",
            "CSAFPID-2554789",
            "CSAFPID-1968135",
            "CSAFPID-2819236",
            "CSAFPID-2554788",
            "CSAFPID-1968132",
            "CSAFPID-2819231",
            "CSAFPID-2819224",
            "CSAFPID-2819225",
            "CSAFPID-2819238",
            "CSAFPID-2819240",
            "CSAFPID-2819229",
            "CSAFPID-2042748",
            "CSAFPID-2819228",
            "CSAFPID-2819239",
            "CSAFPID-2819227",
            "CSAFPID-2819230",
            "CSAFPID-2819226",
            "CSAFPID-2819235",
            "CSAFPID-2819241",
            "CSAFPID-2819234",
            "CSAFPID-2819233",
            "CSAFPID-2819237"
          ]
        }
      ],
      "title": "CVE-2025-35995"
    },
    {
      "cve": "CVE-2025-36504",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "other",
          "text": "Allocation of Resources Without Limits or Throttling",
          "title": "CWE-770"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1968134",
          "CSAFPID-2554790",
          "CSAFPID-1968133",
          "CSAFPID-2554789",
          "CSAFPID-1968135",
          "CSAFPID-2819236",
          "CSAFPID-2554788",
          "CSAFPID-1968132",
          "CSAFPID-2819231",
          "CSAFPID-2819224",
          "CSAFPID-2819225",
          "CSAFPID-2819238",
          "CSAFPID-2819240",
          "CSAFPID-2819229",
          "CSAFPID-2042748",
          "CSAFPID-2819228",
          "CSAFPID-2819239",
          "CSAFPID-2819227",
          "CSAFPID-2819230",
          "CSAFPID-2819226",
          "CSAFPID-2819235",
          "CSAFPID-2819241",
          "CSAFPID-2819234",
          "CSAFPID-2819233",
          "CSAFPID-2819237"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-36504",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-36504.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1968134",
            "CSAFPID-2554790",
            "CSAFPID-1968133",
            "CSAFPID-2554789",
            "CSAFPID-1968135",
            "CSAFPID-2819236",
            "CSAFPID-2554788",
            "CSAFPID-1968132",
            "CSAFPID-2819231",
            "CSAFPID-2819224",
            "CSAFPID-2819225",
            "CSAFPID-2819238",
            "CSAFPID-2819240",
            "CSAFPID-2819229",
            "CSAFPID-2042748",
            "CSAFPID-2819228",
            "CSAFPID-2819239",
            "CSAFPID-2819227",
            "CSAFPID-2819230",
            "CSAFPID-2819226",
            "CSAFPID-2819235",
            "CSAFPID-2819241",
            "CSAFPID-2819234",
            "CSAFPID-2819233",
            "CSAFPID-2819237"
          ]
        }
      ],
      "title": "CVE-2025-36504"
    },
    {
      "cve": "CVE-2025-36525",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
          "title": "CWE-120"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1968134",
          "CSAFPID-2554790",
          "CSAFPID-1968133",
          "CSAFPID-2554789",
          "CSAFPID-1968135",
          "CSAFPID-2819236",
          "CSAFPID-2554788",
          "CSAFPID-1968132",
          "CSAFPID-2819231",
          "CSAFPID-2819224",
          "CSAFPID-2819225",
          "CSAFPID-2819238",
          "CSAFPID-2819240",
          "CSAFPID-2819229",
          "CSAFPID-2042748",
          "CSAFPID-2819228",
          "CSAFPID-2819239",
          "CSAFPID-2819227",
          "CSAFPID-2819230",
          "CSAFPID-2819226",
          "CSAFPID-2819235",
          "CSAFPID-2819241",
          "CSAFPID-2819234",
          "CSAFPID-2819233",
          "CSAFPID-2819237"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-36525",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-36525.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1968134",
            "CSAFPID-2554790",
            "CSAFPID-1968133",
            "CSAFPID-2554789",
            "CSAFPID-1968135",
            "CSAFPID-2819236",
            "CSAFPID-2554788",
            "CSAFPID-1968132",
            "CSAFPID-2819231",
            "CSAFPID-2819224",
            "CSAFPID-2819225",
            "CSAFPID-2819238",
            "CSAFPID-2819240",
            "CSAFPID-2819229",
            "CSAFPID-2042748",
            "CSAFPID-2819228",
            "CSAFPID-2819239",
            "CSAFPID-2819227",
            "CSAFPID-2819230",
            "CSAFPID-2819226",
            "CSAFPID-2819235",
            "CSAFPID-2819241",
            "CSAFPID-2819234",
            "CSAFPID-2819233",
            "CSAFPID-2819237"
          ]
        }
      ],
      "title": "CVE-2025-36525"
    },
    {
      "cve": "CVE-2025-36546",
      "cwe": {
        "id": "CWE-863",
        "name": "Incorrect Authorization"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Authorization",
          "title": "CWE-863"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1968134",
          "CSAFPID-2554790",
          "CSAFPID-1968133",
          "CSAFPID-2554789",
          "CSAFPID-1968135",
          "CSAFPID-2819236",
          "CSAFPID-2554788",
          "CSAFPID-1968132",
          "CSAFPID-2819231",
          "CSAFPID-2819224",
          "CSAFPID-2819225",
          "CSAFPID-2819238",
          "CSAFPID-2819240",
          "CSAFPID-2819229",
          "CSAFPID-2042748",
          "CSAFPID-2819228",
          "CSAFPID-2819239",
          "CSAFPID-2819227",
          "CSAFPID-2819230",
          "CSAFPID-2819226",
          "CSAFPID-2819235",
          "CSAFPID-2819241",
          "CSAFPID-2819234",
          "CSAFPID-2819233",
          "CSAFPID-2819237"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-36546",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-36546.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1968134",
            "CSAFPID-2554790",
            "CSAFPID-1968133",
            "CSAFPID-2554789",
            "CSAFPID-1968135",
            "CSAFPID-2819236",
            "CSAFPID-2554788",
            "CSAFPID-1968132",
            "CSAFPID-2819231",
            "CSAFPID-2819224",
            "CSAFPID-2819225",
            "CSAFPID-2819238",
            "CSAFPID-2819240",
            "CSAFPID-2819229",
            "CSAFPID-2042748",
            "CSAFPID-2819228",
            "CSAFPID-2819239",
            "CSAFPID-2819227",
            "CSAFPID-2819230",
            "CSAFPID-2819226",
            "CSAFPID-2819235",
            "CSAFPID-2819241",
            "CSAFPID-2819234",
            "CSAFPID-2819233",
            "CSAFPID-2819237"
          ]
        }
      ],
      "title": "CVE-2025-36546"
    },
    {
      "cve": "CVE-2025-36557",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
          "title": "CWE-120"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1968134",
          "CSAFPID-2554790",
          "CSAFPID-1968133",
          "CSAFPID-2554789",
          "CSAFPID-1968135",
          "CSAFPID-2819236",
          "CSAFPID-2554788",
          "CSAFPID-1968132",
          "CSAFPID-2819231",
          "CSAFPID-2819224",
          "CSAFPID-2819225",
          "CSAFPID-2819238",
          "CSAFPID-2819240",
          "CSAFPID-2819229",
          "CSAFPID-2042748",
          "CSAFPID-2819228",
          "CSAFPID-2819239",
          "CSAFPID-2819227",
          "CSAFPID-2819230",
          "CSAFPID-2819226",
          "CSAFPID-2819235",
          "CSAFPID-2819241",
          "CSAFPID-2819234",
          "CSAFPID-2819233",
          "CSAFPID-2819237"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-36557",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-36557.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1968134",
            "CSAFPID-2554790",
            "CSAFPID-1968133",
            "CSAFPID-2554789",
            "CSAFPID-1968135",
            "CSAFPID-2819236",
            "CSAFPID-2554788",
            "CSAFPID-1968132",
            "CSAFPID-2819231",
            "CSAFPID-2819224",
            "CSAFPID-2819225",
            "CSAFPID-2819238",
            "CSAFPID-2819240",
            "CSAFPID-2819229",
            "CSAFPID-2042748",
            "CSAFPID-2819228",
            "CSAFPID-2819239",
            "CSAFPID-2819227",
            "CSAFPID-2819230",
            "CSAFPID-2819226",
            "CSAFPID-2819235",
            "CSAFPID-2819241",
            "CSAFPID-2819234",
            "CSAFPID-2819233",
            "CSAFPID-2819237"
          ]
        }
      ],
      "title": "CVE-2025-36557"
    },
    {
      "cve": "CVE-2025-41399",
      "cwe": {
        "id": "CWE-404",
        "name": "Improper Resource Shutdown or Release"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Resource Shutdown or Release",
          "title": "CWE-404"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1968134",
          "CSAFPID-2554790",
          "CSAFPID-1968133",
          "CSAFPID-2554789",
          "CSAFPID-1968135",
          "CSAFPID-2819236",
          "CSAFPID-2554788",
          "CSAFPID-1968132",
          "CSAFPID-2819231",
          "CSAFPID-2819224",
          "CSAFPID-2819225",
          "CSAFPID-2819238",
          "CSAFPID-2819240",
          "CSAFPID-2819229",
          "CSAFPID-2042748",
          "CSAFPID-2819228",
          "CSAFPID-2819239",
          "CSAFPID-2819227",
          "CSAFPID-2819230",
          "CSAFPID-2819226",
          "CSAFPID-2819235",
          "CSAFPID-2819241",
          "CSAFPID-2819234",
          "CSAFPID-2819233",
          "CSAFPID-2819237"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-41399",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-41399.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1968134",
            "CSAFPID-2554790",
            "CSAFPID-1968133",
            "CSAFPID-2554789",
            "CSAFPID-1968135",
            "CSAFPID-2819236",
            "CSAFPID-2554788",
            "CSAFPID-1968132",
            "CSAFPID-2819231",
            "CSAFPID-2819224",
            "CSAFPID-2819225",
            "CSAFPID-2819238",
            "CSAFPID-2819240",
            "CSAFPID-2819229",
            "CSAFPID-2042748",
            "CSAFPID-2819228",
            "CSAFPID-2819239",
            "CSAFPID-2819227",
            "CSAFPID-2819230",
            "CSAFPID-2819226",
            "CSAFPID-2819235",
            "CSAFPID-2819241",
            "CSAFPID-2819234",
            "CSAFPID-2819233",
            "CSAFPID-2819237"
          ]
        }
      ],
      "title": "CVE-2025-41399"
    },
    {
      "cve": "CVE-2025-41414",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1968134",
          "CSAFPID-2554790",
          "CSAFPID-1968133",
          "CSAFPID-2554789",
          "CSAFPID-1968135",
          "CSAFPID-2819236",
          "CSAFPID-2554788",
          "CSAFPID-1968132",
          "CSAFPID-2819231",
          "CSAFPID-2819224",
          "CSAFPID-2819225",
          "CSAFPID-2819238",
          "CSAFPID-2819240",
          "CSAFPID-2819229",
          "CSAFPID-2042748",
          "CSAFPID-2819228",
          "CSAFPID-2819239",
          "CSAFPID-2819227",
          "CSAFPID-2819230",
          "CSAFPID-2819226",
          "CSAFPID-2819235",
          "CSAFPID-2819241",
          "CSAFPID-2819234",
          "CSAFPID-2819233",
          "CSAFPID-2819237"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-41414",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-41414.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1968134",
            "CSAFPID-2554790",
            "CSAFPID-1968133",
            "CSAFPID-2554789",
            "CSAFPID-1968135",
            "CSAFPID-2819236",
            "CSAFPID-2554788",
            "CSAFPID-1968132",
            "CSAFPID-2819231",
            "CSAFPID-2819224",
            "CSAFPID-2819225",
            "CSAFPID-2819238",
            "CSAFPID-2819240",
            "CSAFPID-2819229",
            "CSAFPID-2042748",
            "CSAFPID-2819228",
            "CSAFPID-2819239",
            "CSAFPID-2819227",
            "CSAFPID-2819230",
            "CSAFPID-2819226",
            "CSAFPID-2819235",
            "CSAFPID-2819241",
            "CSAFPID-2819234",
            "CSAFPID-2819233",
            "CSAFPID-2819237"
          ]
        }
      ],
      "title": "CVE-2025-41414"
    },
    {
      "cve": "CVE-2025-41431",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1968134",
          "CSAFPID-2554790",
          "CSAFPID-1968133",
          "CSAFPID-2554789",
          "CSAFPID-1968135",
          "CSAFPID-2819236",
          "CSAFPID-2554788",
          "CSAFPID-1968132",
          "CSAFPID-2819231",
          "CSAFPID-2819224",
          "CSAFPID-2819225",
          "CSAFPID-2819238",
          "CSAFPID-2819240",
          "CSAFPID-2819229",
          "CSAFPID-2042748",
          "CSAFPID-2819228",
          "CSAFPID-2819239",
          "CSAFPID-2819227",
          "CSAFPID-2819230",
          "CSAFPID-2819226",
          "CSAFPID-2819235",
          "CSAFPID-2819241",
          "CSAFPID-2819234",
          "CSAFPID-2819233",
          "CSAFPID-2819237"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-41431",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-41431.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1968134",
            "CSAFPID-2554790",
            "CSAFPID-1968133",
            "CSAFPID-2554789",
            "CSAFPID-1968135",
            "CSAFPID-2819236",
            "CSAFPID-2554788",
            "CSAFPID-1968132",
            "CSAFPID-2819231",
            "CSAFPID-2819224",
            "CSAFPID-2819225",
            "CSAFPID-2819238",
            "CSAFPID-2819240",
            "CSAFPID-2819229",
            "CSAFPID-2042748",
            "CSAFPID-2819228",
            "CSAFPID-2819239",
            "CSAFPID-2819227",
            "CSAFPID-2819230",
            "CSAFPID-2819226",
            "CSAFPID-2819235",
            "CSAFPID-2819241",
            "CSAFPID-2819234",
            "CSAFPID-2819233",
            "CSAFPID-2819237"
          ]
        }
      ],
      "title": "CVE-2025-41431"
    },
    {
      "cve": "CVE-2025-41433",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1968134",
          "CSAFPID-2554790",
          "CSAFPID-1968133",
          "CSAFPID-2554789",
          "CSAFPID-1968135",
          "CSAFPID-2819236",
          "CSAFPID-2554788",
          "CSAFPID-1968132",
          "CSAFPID-2819231",
          "CSAFPID-2819224",
          "CSAFPID-2819225",
          "CSAFPID-2819238",
          "CSAFPID-2819240",
          "CSAFPID-2819229",
          "CSAFPID-2042748",
          "CSAFPID-2819228",
          "CSAFPID-2819239",
          "CSAFPID-2819227",
          "CSAFPID-2819230",
          "CSAFPID-2819226",
          "CSAFPID-2819235",
          "CSAFPID-2819241",
          "CSAFPID-2819234",
          "CSAFPID-2819233",
          "CSAFPID-2819237"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-41433",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-41433.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1968134",
            "CSAFPID-2554790",
            "CSAFPID-1968133",
            "CSAFPID-2554789",
            "CSAFPID-1968135",
            "CSAFPID-2819236",
            "CSAFPID-2554788",
            "CSAFPID-1968132",
            "CSAFPID-2819231",
            "CSAFPID-2819224",
            "CSAFPID-2819225",
            "CSAFPID-2819238",
            "CSAFPID-2819240",
            "CSAFPID-2819229",
            "CSAFPID-2042748",
            "CSAFPID-2819228",
            "CSAFPID-2819239",
            "CSAFPID-2819227",
            "CSAFPID-2819230",
            "CSAFPID-2819226",
            "CSAFPID-2819235",
            "CSAFPID-2819241",
            "CSAFPID-2819234",
            "CSAFPID-2819233",
            "CSAFPID-2819237"
          ]
        }
      ],
      "title": "CVE-2025-41433"
    },
    {
      "cve": "CVE-2025-46265",
      "cwe": {
        "id": "CWE-863",
        "name": "Incorrect Authorization"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Authorization",
          "title": "CWE-863"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1968134",
          "CSAFPID-2554790",
          "CSAFPID-1968133",
          "CSAFPID-2554789",
          "CSAFPID-1968135",
          "CSAFPID-2819236",
          "CSAFPID-2554788",
          "CSAFPID-1968132",
          "CSAFPID-2819231",
          "CSAFPID-2819224",
          "CSAFPID-2819225",
          "CSAFPID-2819238",
          "CSAFPID-2819240",
          "CSAFPID-2819229",
          "CSAFPID-2042748",
          "CSAFPID-2819228",
          "CSAFPID-2819239",
          "CSAFPID-2819227",
          "CSAFPID-2819230",
          "CSAFPID-2819226",
          "CSAFPID-2819235",
          "CSAFPID-2819241",
          "CSAFPID-2819234",
          "CSAFPID-2819233",
          "CSAFPID-2819237"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-46265",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-46265.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1968134",
            "CSAFPID-2554790",
            "CSAFPID-1968133",
            "CSAFPID-2554789",
            "CSAFPID-1968135",
            "CSAFPID-2819236",
            "CSAFPID-2554788",
            "CSAFPID-1968132",
            "CSAFPID-2819231",
            "CSAFPID-2819224",
            "CSAFPID-2819225",
            "CSAFPID-2819238",
            "CSAFPID-2819240",
            "CSAFPID-2819229",
            "CSAFPID-2042748",
            "CSAFPID-2819228",
            "CSAFPID-2819239",
            "CSAFPID-2819227",
            "CSAFPID-2819230",
            "CSAFPID-2819226",
            "CSAFPID-2819235",
            "CSAFPID-2819241",
            "CSAFPID-2819234",
            "CSAFPID-2819233",
            "CSAFPID-2819237"
          ]
        }
      ],
      "title": "CVE-2025-46265"
    },
    {
      "cve": "CVE-2025-31644",
      "cwe": {
        "id": "CWE-77",
        "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
          "title": "CWE-77"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1968134",
          "CSAFPID-2554790",
          "CSAFPID-1968133",
          "CSAFPID-2554789",
          "CSAFPID-1968135",
          "CSAFPID-2819236",
          "CSAFPID-2554788",
          "CSAFPID-1968132",
          "CSAFPID-2819231",
          "CSAFPID-2819224",
          "CSAFPID-2819225",
          "CSAFPID-2819238",
          "CSAFPID-2819240",
          "CSAFPID-2819229",
          "CSAFPID-2042748",
          "CSAFPID-2819228",
          "CSAFPID-2819239",
          "CSAFPID-2819227",
          "CSAFPID-2819230",
          "CSAFPID-2819226",
          "CSAFPID-2819235",
          "CSAFPID-2819241",
          "CSAFPID-2819234",
          "CSAFPID-2819233",
          "CSAFPID-2819237"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31644",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31644.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1968134",
            "CSAFPID-2554790",
            "CSAFPID-1968133",
            "CSAFPID-2554789",
            "CSAFPID-1968135",
            "CSAFPID-2819236",
            "CSAFPID-2554788",
            "CSAFPID-1968132",
            "CSAFPID-2819231",
            "CSAFPID-2819224",
            "CSAFPID-2819225",
            "CSAFPID-2819238",
            "CSAFPID-2819240",
            "CSAFPID-2819229",
            "CSAFPID-2042748",
            "CSAFPID-2819228",
            "CSAFPID-2819239",
            "CSAFPID-2819227",
            "CSAFPID-2819230",
            "CSAFPID-2819226",
            "CSAFPID-2819235",
            "CSAFPID-2819241",
            "CSAFPID-2819234",
            "CSAFPID-2819233",
            "CSAFPID-2819237"
          ]
        }
      ],
      "title": "CVE-2025-31644"
    }
  ]
}

CVE-2025-36504 (GCVE-0-2025-36504)

Vulnerability from cvelistv5

Published

2025-05-07 22:04

Modified

2025-05-08 13:05

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
8.7 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Summary

When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

References

►

URL

Tags

https://my.f5.com/manage/s/article/K000140919

vendor-advisory

Impacted products

Vendor

Product

Version

►

BIG-IP

Patch: 17.5.0   < *
Version: 17.1.0   < 17.1.2
Version: 16.1.0   < 16.1.6
Patch: 15.1.0   < *

F5	BIG-IP Next	Version: 20.2.0 < 20.3.0
F5	BIG-IP Next SPK	Version: 1.8.0 < 2.0.0 Version: 1.7.0 < *
F5	BIG-IP Next CNF	Version: 1.1.0 < 1.4.0 Version: 1.1.0 < *

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-36504",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-08T13:05:22.215826Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-08T13:05:39.886Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "modules": [
            "All Modules"
          ],
          "product": "BIG-IP",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "17.5.0",
              "versionType": "custom"
            },
            {
              "lessThan": "17.1.2",
              "status": "affected",
              "version": "17.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "16.1.6",
              "status": "affected",
              "version": "16.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "15.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "BIG-IP Next",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "20.3.0",
              "status": "affected",
              "version": "20.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "BIG-IP Next SPK",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "2.0.0",
              "status": "affected",
              "version": "1.8.0",
              "versionType": "custom"
            },
            {
              "lessThan": "*",
              "status": "affected",
              "version": "1.7.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "BIG-IP Next CNF",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "1.4.0",
              "status": "affected",
              "version": "1.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "*",
              "status": "affected",
              "version": "1.1.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "F5"
        }
      ],
      "datePublic": "2025-05-07T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eWhen a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization.\u003c/span\u003e\u0026nbsp; Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
            }
          ],
          "value": "When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization.\u00a0 Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-07T22:04:09.881Z",
        "orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
        "shortName": "f5"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://my.f5.com/manage/s/article/K000140919"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "BIG-IP HTTP/2 vulnerability",
      "x_generator": {
        "engine": "F5 SIRTBot v1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
    "assignerShortName": "f5",
    "cveId": "CVE-2025-36504",
    "datePublished": "2025-05-07T22:04:09.881Z",
    "dateReserved": "2025-04-23T22:28:26.359Z",
    "dateUpdated": "2025-05-08T13:05:39.886Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-31644 (GCVE-0-2025-31644)

Vulnerability from cvelistv5

Published

2025-05-07 22:04

Modified

2025-05-15 04:01

Severity ?

8.7 (High) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
8.5 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:L

CWE

CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

Summary

When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attacker with administrator role privileges to execute arbitrary system commands. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

References

►

URL

Tags

https://my.f5.com/manage/s/article/K000148591

vendor-advisory

Impacted products

	Vendor	Product	Version
	F5	BIG-IP	Patch: 17.5.0 < * Version: 17.1.0 < 17.1.2.2 Version: 16.1.0 < 16.1.6 Version: 15.1.0 < 15.1.10.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-31644",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-07T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-15T04:01:14.897Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "modules": [
            "All Modules",
            "Appliance Mode"
          ],
          "product": "BIG-IP",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "17.5.0",
              "versionType": "custom"
            },
            {
              "lessThan": "17.1.2.2",
              "status": "affected",
              "version": "17.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "16.1.6",
              "status": "affected",
              "version": "16.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "15.1.10.7",
              "status": "affected",
              "version": "15.1.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "F5 acknowledges Matei \"Mal\" Badanoiu @ Deloitte for bringing this issue to our attention and following the highest standards of coordinated disclosure."
        }
      ],
      "datePublic": "2025-05-07T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eWhen running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (\u003c/span\u003e\u003cstrong\u003etmsh\u003c/strong\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e) command which may allow an authenticated attacker with administrator role privileges to execute arbitrary system commands. A successful exploit can allow the attacker to cross a security boundary.\u003c/span\u003e\u0026nbsp;\u0026nbsp;Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
            }
          ],
          "value": "When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attacker with administrator role privileges to execute arbitrary system commands. A successful exploit can allow the attacker to cross a security boundary.\u00a0\u00a0Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:L",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-77",
              "description": "CWE-77 Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-07T22:04:10.938Z",
        "orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
        "shortName": "f5"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://my.f5.com/manage/s/article/K000148591"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Appliance mode BIG-IP iControl REST and tmsh vulnerability",
      "x_generator": {
        "engine": "F5 SIRTBot v1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
    "assignerShortName": "f5",
    "cveId": "CVE-2025-31644",
    "datePublished": "2025-05-07T22:04:10.938Z",
    "dateReserved": "2025-04-23T22:28:44.369Z",
    "dateUpdated": "2025-05-15T04:01:14.897Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-36525 (GCVE-0-2025-36525)

Vulnerability from cvelistv5

Published

2025-05-07 22:04

Modified

2025-05-08 13:05

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
8.7 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

CWE

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Summary

When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

References

►

URL

Tags

https://my.f5.com/manage/s/article/K000150598

vendor-advisory

Impacted products

	Vendor	Product	Version
	F5	BIG-IP	Patch: 17.5.0 < * Version: 17.1.0 < 17.1.2.2 Version: 16.1.0 < 16.1.6 Version: 15.1.0 < *

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-36525",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-08T13:04:55.878160Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-08T13:05:01.013Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "modules": [
            "APM"
          ],
          "product": "BIG-IP",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "17.5.0",
              "versionType": "custom"
            },
            {
              "lessThan": "17.1.2.2",
              "status": "affected",
              "version": "17.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "16.1.6",
              "status": "affected",
              "version": "16.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "*",
              "status": "affected",
              "version": "15.1.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "F5"
        }
      ],
      "datePublic": "2025-05-07T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eWhen a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to terminate.\u003c/span\u003e \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
            }
          ],
          "value": "When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to terminate. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-07T22:04:10.220Z",
        "orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
        "shortName": "f5"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://my.f5.com/manage/s/article/K000150598"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "tags": [
        "x_F5"
      ],
      "title": "BIG-IP APM PingAccess Virtual Server Vulnerability",
      "x_generator": {
        "engine": "F5 SIRTBot v1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
    "assignerShortName": "f5",
    "cveId": "CVE-2025-36525",
    "datePublished": "2025-05-07T22:04:10.220Z",
    "dateReserved": "2025-04-23T22:28:26.366Z",
    "dateUpdated": "2025-05-08T13:05:01.013Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-41433 (GCVE-0-2025-41433)

Vulnerability from cvelistv5

Published

2025-05-07 22:04

Modified

2025-05-08 13:23

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
8.7 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

CWE

CWE-476 - NULL Pointer Dereference

Summary

When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

References

►

URL

Tags

https://my.f5.com/manage/s/article/K000140937

vendor-advisory

Impacted products

	Vendor	Product	Version
	F5	BIG-IP	Patch: 17.5.0 < * Version: 17.1.0 < 17.1.2 Version: 16.1.0 < 16.1.5 Version: 15.1.0 < *

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-41433",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-08T13:23:00.343723Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-08T13:23:07.562Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "modules": [
            "All Modules"
          ],
          "product": "BIG-IP",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "17.5.0",
              "versionType": "custom"
            },
            {
              "lessThan": "17.1.2",
              "status": "affected",
              "version": "17.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "16.1.5",
              "status": "affected",
              "version": "16.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "*",
              "status": "affected",
              "version": "15.1.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "F5"
        }
      ],
      "datePublic": "2025-05-07T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eWhen a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.\u003c/span\u003e\n\n \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
            }
          ],
          "value": "When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.\n\n \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476 NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-07T22:04:09.139Z",
        "orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
        "shortName": "f5"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://my.f5.com/manage/s/article/K000140937"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "BIG-IP SIP ALG profile vulnerability",
      "x_generator": {
        "engine": "F5 SIRTBot v1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
    "assignerShortName": "f5",
    "cveId": "CVE-2025-41433",
    "datePublished": "2025-05-07T22:04:09.139Z",
    "dateReserved": "2025-04-23T22:28:26.349Z",
    "dateUpdated": "2025-05-08T13:23:07.562Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-41414 (GCVE-0-2025-41414)

Vulnerability from cvelistv5

Published

2025-05-07 22:04

Modified

2025-05-08 13:06

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
8.7 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

CWE

CWE-476 - NULL Pointer Dereference

Summary

When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

References

►

URL

Tags

https://my.f5.com/manage/s/article/K000140968

vendor-advisory

Impacted products

Vendor

Product

Version

►

BIG-IP

Patch: 17.5.0   < *
Version: 17.1.0   < 17.1.2
Version: 16.1.0   < 16.1.5
Version: 15.1.0   < *

	F5	BIG-IP Next SPK	Version: 1.8.0 < 2.0.0 Version: 1.7.0 < 1.7.9
	F5	BIG-IP Next CNF	Patch: 2.0.0 < * Version: 1.1.0 < 1.4.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-41414",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-08T13:06:20.679873Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-08T13:06:27.107Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "modules": [
            "All Modules"
          ],
          "product": "BIG-IP",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "17.5.0",
              "versionType": "custom"
            },
            {
              "lessThan": "17.1.2",
              "status": "affected",
              "version": "17.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "16.1.5",
              "status": "affected",
              "version": "16.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "*",
              "status": "affected",
              "version": "15.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "BIG-IP Next SPK",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "2.0.0",
              "status": "affected",
              "version": "1.8.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.7.9",
              "status": "affected",
              "version": "1.7.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "BIG-IP Next CNF",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.4.0",
              "status": "affected",
              "version": "1.1.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "F5"
        }
      ],
      "datePublic": "2025-05-07T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eWhen HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate.\u003c/span\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\u0026nbsp;\u003c/span\u003e\n\n \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated"
            }
          ],
          "value": "When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate.\u00a0\n\n \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476 NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-07T22:04:09.501Z",
        "orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
        "shortName": "f5"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://my.f5.com/manage/s/article/K000140968"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "BIG-IP HTTP/2 vulnerability",
      "x_generator": {
        "engine": "F5 SIRTBot v1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
    "assignerShortName": "f5",
    "cveId": "CVE-2025-41414",
    "datePublished": "2025-05-07T22:04:09.501Z",
    "dateReserved": "2025-04-23T22:28:26.354Z",
    "dateUpdated": "2025-05-08T13:06:27.107Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-46265 (GCVE-0-2025-46265)

Vulnerability from cvelistv5

Published

2025-05-07 22:04

Modified

2025-05-08 12:59

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.7 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CWE

CWE-863 - Incorrect Authorization

Summary

On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may be authorized with higher privilege F5OS roles. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

References

►

URL

Tags

https://my.f5.com/manage/s/article/K000139503

vendor-advisory

Impacted products

Vendor

Product

Version

►

F5OS - Appliance

Version: 1.7.0 < 1.8.0
Version: 1.5.1 < 1.5.2

F5OS - Chassis

Version: 1.6.0 < 1.8.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-46265",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-08T03:56:24.508004Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-08T12:59:36.892Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "F5OS - Appliance",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "1.8.0",
              "status": "affected",
              "version": "1.7.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.5.2",
              "status": "affected",
              "version": "1.5.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "F5OS - Chassis",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "1.8.0",
              "status": "affected",
              "version": "1.6.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "F5"
        }
      ],
      "datePublic": "2025-05-07T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eOn F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may be authorized with higher privilege F5OS roles.\u003c/span\u003e\u003c/span\u003e\u0026nbsp;Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
            }
          ],
          "value": "On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may be authorized with higher privilege F5OS roles.\u00a0Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863 Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-07T22:04:08.759Z",
        "orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
        "shortName": "f5"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://my.f5.com/manage/s/article/K000139503"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "F5OS vulnerability",
      "x_generator": {
        "engine": "F5 SIRTBot v1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
    "assignerShortName": "f5",
    "cveId": "CVE-2025-46265",
    "datePublished": "2025-05-07T22:04:08.759Z",
    "dateReserved": "2025-04-23T22:28:26.342Z",
    "dateUpdated": "2025-05-08T12:59:36.892Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-36557 (GCVE-0-2025-36557)

Vulnerability from cvelistv5

Published

2025-05-07 22:04

Modified

2025-05-19 22:39

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
8.7 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

CWE

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Summary

When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

References

►

URL

Tags

https://my.f5.com/manage/s/article/K000139571

vendor-advisory

Impacted products

Vendor

Product

Version

►

BIG-IP

Patch: 17.5.0   < *
Version: 17.1.0   < 17.1.2
Version: 16.1.0   < 16.1.5
Patch: 15.1.0   < *

	F5	BIG-IP Next SPK	Version: 1.8.0 < 2.0.0 Version: 1.7.0 < 1.7.9
	F5	BIG-IP Next CNF	Patch: 2.0.0 < * Version: 1.1.0 < 1.4.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-36557",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-08T13:23:19.379186Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-08T13:23:26.840Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "modules": [
            "All Modules"
          ],
          "product": "BIG-IP",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "17.5.0",
              "versionType": "custom"
            },
            {
              "lessThan": "17.1.2",
              "status": "affected",
              "version": "17.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "16.1.5",
              "status": "affected",
              "version": "16.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "15.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "BIG-IP Next SPK",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "2.0.0",
              "status": "affected",
              "version": "1.8.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.7.9",
              "status": "affected",
              "version": "1.7.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "BIG-IP Next CNF",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.4.0",
              "status": "affected",
              "version": "1.1.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "F5"
        }
      ],
      "datePublic": "2025-05-07T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\n\nWhen an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.\u0026nbsp;\u003c/span\u003eNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
            }
          ],
          "value": "When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.\u00a0Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-19T22:39:58.170Z",
        "orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
        "shortName": "f5"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://my.f5.com/manage/s/article/K000139571"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "BIG-IP HTTP vulnerability",
      "x_generator": {
        "engine": "F5 SIRTBot v1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
    "assignerShortName": "f5",
    "cveId": "CVE-2025-36557",
    "datePublished": "2025-05-07T22:04:07.655Z",
    "dateReserved": "2025-04-23T22:28:26.322Z",
    "dateUpdated": "2025-05-19T22:39:58.170Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-41399 (GCVE-0-2025-41399)

Vulnerability from cvelistv5

Published

2025-05-07 22:04

Modified

2025-05-08 13:23

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
8.7 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

CWE

CWE-404 - Improper Resource Shutdown or Release

Summary

When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

References

►

URL

Tags

https://my.f5.com/manage/s/article/K000137709

vendor-advisory

Impacted products

Vendor

Product

Version

►

BIG-IP

Patch: 17.5.0   < *
Version: 17.1.0   < 17.1.1
Version: 16.1.0   < 16.1.4
Version: 15.1.0   < 15.1.9

F5	BIG-IP Next	Version: 20.0.1 < 20.2.1
F5	BIG-IP Next SPK	Version: 1.8.0 < 2.0.0 Version: 1.7.0 < 1.7.12
F5	BIG-IP Next CNF	Patch: 2.0.0 < * Version: 1.1.0 < 1.3.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-41399",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-08T13:23:45.422611Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-08T13:23:51.078Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "modules": [
            "All Modules"
          ],
          "product": "BIG-IP",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "17.5.0",
              "versionType": "custom"
            },
            {
              "lessThan": "17.1.1",
              "status": "affected",
              "version": "17.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "16.1.4",
              "status": "affected",
              "version": "16.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "15.1.9",
              "status": "affected",
              "version": "15.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "BIG-IP Next",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "20.2.1",
              "status": "affected",
              "version": "20.0.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "BIG-IP Next SPK",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "2.0.0",
              "status": "affected",
              "version": "1.8.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.7.12",
              "status": "affected",
              "version": "1.7.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "BIG-IP Next CNF",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.3.0",
              "status": "affected",
              "version": "1.1.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "F5"
        }
      ],
      "datePublic": "2025-05-07T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eWhen a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.\u003c/span\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\u0026nbsp;\u003c/span\u003eNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
            }
          ],
          "value": "When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.\u00a0Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-404",
              "description": "CWE-404 Improper Resource Shutdown or Release",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-07T22:04:07.220Z",
        "orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
        "shortName": "f5"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://my.f5.com/manage/s/article/K000137709"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "SCTP Vulnerability",
      "x_generator": {
        "engine": "F5 SIRTBot v1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
    "assignerShortName": "f5",
    "cveId": "CVE-2025-41399",
    "datePublished": "2025-05-07T22:04:07.220Z",
    "dateReserved": "2025-04-23T22:28:26.313Z",
    "dateUpdated": "2025-05-08T13:23:51.078Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-35995 (GCVE-0-2025-35995)

Vulnerability from cvelistv5

Published

2025-05-07 22:04

Modified

2025-05-08 13:04

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
8.7 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

CWE

CWE-125 - Out-of-bounds Read

Summary

When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat command is enabled on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

References

►

URL

Tags

https://my.f5.com/manage/s/article/K000149952

vendor-advisory

Impacted products

	Vendor	Product	Version
	F5	BIG-IP	Patch: 17.5.0 < * Version: 17.1.0 < 17.1.2.2 Version: 16.1.0 < 16.1.6 Version: 15.1.0 < *

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-35995",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-08T13:04:28.279380Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-08T13:04:34.901Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "modules": [
            "BIG-IP PEM"
          ],
          "product": "BIG-IP",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "17.5.0",
              "versionType": "custom"
            },
            {
              "lessThan": "17.1.2.2",
              "status": "affected",
              "version": "17.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "16.1.6",
              "status": "affected",
              "version": "16.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "*",
              "status": "affected",
              "version": "15.1.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "F5"
        }
      ],
      "datePublic": "2025-05-07T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eWhen a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the \u003c/span\u003e\u003cstrong\u003eurlcat\u003c/strong\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\u0026nbsp;command is enabled on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.\u003c/span\u003e\u0026nbsp;Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\u003c/span\u003e\u003cbr\u003e"
            }
          ],
          "value": "When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat\u00a0command is enabled on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.\u00a0Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-07T22:04:10.575Z",
        "orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
        "shortName": "f5"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://my.f5.com/manage/s/article/K000149952"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "BIG-IP PEM vulnerability",
      "x_generator": {
        "engine": "F5 SIRTBot v1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
    "assignerShortName": "f5",
    "cveId": "CVE-2025-35995",
    "datePublished": "2025-05-07T22:04:10.575Z",
    "dateReserved": "2025-04-23T22:28:26.371Z",
    "dateUpdated": "2025-05-08T13:04:34.901Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-36546 (GCVE-0-2025-36546)

Vulnerability from cvelistv5

Published

2025-05-07 22:04

Modified

2025-05-08 13:00

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
9.2 (Critical) - CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CWE

CWE-863 - Incorrect Authorization

Summary

On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication, and then enabled Appliance Mode; access via SSH key-based authentication is still allowed. For an attacker to exploit this vulnerability they must obtain the root user's SSH private key. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

References

►

URL

Tags

https://my.f5.com/manage/s/article/K000140574

vendor-advisory

Impacted products

Vendor

Product

Version

►

F5OS - Appliance

Version: 1.7.0 < 1.8.0
Version: 1.5.1 < 1.5.3

F5OS - Chassis

Version: 1.6.0 < 1.8.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-36546",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-08T03:56:25.828794Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-08T13:00:27.327Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "modules": [
            "Appliance Mode"
          ],
          "product": "F5OS - Appliance",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "1.8.0",
              "status": "affected",
              "version": "1.7.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.5.3",
              "status": "affected",
              "version": "1.5.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "modules": [
            "Appliance Mode"
          ],
          "product": "F5OS - Chassis",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "1.8.0",
              "status": "affected",
              "version": "1.6.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "F5"
        }
      ],
      "datePublic": "2025-05-07T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eOn an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication, and then enabled Appliance Mode; access via SSH key-based authentication is still allowed. For an attacker to exploit this vulnerability they must obtain the root user\u0027s SSH private key.\u0026nbsp;\u0026nbsp;\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n\n\u003c/span\u003e\u003c/span\u003e\u003cbr\u003e"
            }
          ],
          "value": "On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication, and then enabled Appliance Mode; access via SSH key-based authentication is still allowed. For an attacker to exploit this vulnerability they must obtain the root user\u0027s SSH private key.\u00a0\u00a0\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 9.2,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863 Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-07T22:04:08.040Z",
        "orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
        "shortName": "f5"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://my.f5.com/manage/s/article/K000140574"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "F5OS Appliance Mode vulnerability",
      "x_generator": {
        "engine": "F5 SIRTBot v1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
    "assignerShortName": "f5",
    "cveId": "CVE-2025-36546",
    "datePublished": "2025-05-07T22:04:08.040Z",
    "dateReserved": "2025-04-23T22:28:26.330Z",
    "dateUpdated": "2025-05-08T13:00:27.327Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-41431 (GCVE-0-2025-41431)

Vulnerability from cvelistv5

Published

2025-05-07 22:04

Modified

2025-05-08 13:03

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
8.7 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

CWE

CWE-787 - Out-of-bounds Write

Summary

When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate in the standby BIG-IP systems in a traffic group. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

References

►

URL

Tags

https://my.f5.com/manage/s/article/K000150668

vendor-advisory

Impacted products

	Vendor	Product	Version
	F5	BIG-IP	Patch: 17.5.0 < * Version: 17.1.0 < 17.1.2.2 Patch: 16.1.0 < * Patch: 15.1.0 < *

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-41431",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-08T13:03:25.386401Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-08T13:03:33.148Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "modules": [
            "All Modules"
          ],
          "product": "BIG-IP",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "17.5.0",
              "versionType": "custom"
            },
            {
              "lessThan": "17.1.2.2",
              "status": "affected",
              "version": "17.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "16.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "15.1.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "F5"
        }
      ],
      "datePublic": "2025-05-07T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eWhen connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate in the standby BIG-IP systems in a traffic group.\u003c/span\u003e \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
            }
          ],
          "value": "When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate in the standby BIG-IP systems in a traffic group. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-07T22:04:11.279Z",
        "orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
        "shortName": "f5"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://my.f5.com/manage/s/article/K000150668"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "TMM Vulnerability",
      "x_generator": {
        "engine": "F5 SIRTBot v1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
    "assignerShortName": "f5",
    "cveId": "CVE-2025-41431",
    "datePublished": "2025-05-07T22:04:11.279Z",
    "dateReserved": "2025-04-23T22:28:44.383Z",
    "dateUpdated": "2025-05-08T13:03:33.148Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

ncsc-2025-0147

Vulnerability from csaf_ncscnl

CVE-2025-36504 (GCVE-0-2025-36504)

Vulnerability from cvelistv5

CVE-2025-31644 (GCVE-0-2025-31644)

Vulnerability from cvelistv5

CVE-2025-36525 (GCVE-0-2025-36525)

Vulnerability from cvelistv5

CVE-2025-41433 (GCVE-0-2025-41433)

Vulnerability from cvelistv5

CVE-2025-41414 (GCVE-0-2025-41414)

Vulnerability from cvelistv5

CVE-2025-46265 (GCVE-0-2025-46265)

Vulnerability from cvelistv5

CVE-2025-36557 (GCVE-0-2025-36557)

Vulnerability from cvelistv5

CVE-2025-41399 (GCVE-0-2025-41399)

Vulnerability from cvelistv5

CVE-2025-35995 (GCVE-0-2025-35995)

Vulnerability from cvelistv5

CVE-2025-36546 (GCVE-0-2025-36546)

Vulnerability from cvelistv5

CVE-2025-41431 (GCVE-0-2025-41431)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature