Skip to content
OpenAdvisories
High NCSC-2025-0147 11 CVEs

Kwetsbaarheden verholpen in F5 BIG-IP

Published May 9, 2025 · Updated May 9, 2025 · nl

Vendor: F5 Product: BIG-IP Product: BIG-IP Next Product: BIG-IP Next CNF Product: BIG-IP Next SPK Product: F5OS - Appliance Product: F5OS - Chassis

Summary

F5 heeft kwetsbaarheden verholpen in de BIG-IP systemen.

Details

Interpretaties
De kwetsbaarheden bevinden zich in verschillende configuraties van de BIG-IP systemen, waaronder het Traffic Management Microkernel (TMM) dat kan worden beëindigd door ongepubliceerde verzoeken. Dit kan leiden tot prestatie- en stabiliteitsproblemen, vooral voor softwareversies die End of Technical Support (EoTS) hebben bereikt. De kwetsbaarheden kunnen ook leiden tot ongeautoriseerde toegang en privilege-escalatie voor gebruikers, wat de beveiliging van de systemen in gevaar kan brengen.

Oplossingen
F5 heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 11

  • High 8.8
    CVE-2025-46265

    F5OS vulnerability

    On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may be authorized with higher privilege F5OS roles. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

    F5 F5OS - Appliance F5OS - Chassis Network devices
  • High 8.7
    CVE-2025-31644 Public exploit EPSS 24%

    Appliance mode BIG-IP iControl REST and tmsh vulnerability

    When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attacker with administrator role privileges to execute arbitrary system commands. A …

    F5 BIG-IP Network devices
  • High 8.1
    CVE-2025-36546

    F5OS Appliance Mode vulnerability

    On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication, and then enabled Appliance Mode; access via SSH key-based authentication is still allowed. For an attacker to exploit this vulnerability …

    F5 F5OS - Appliance F5OS - Chassis Network devices
  • High 7.5
    CVE-2025-35995

    BIG-IP PEM vulnerability

    When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat command is enabled on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Sof…

    F5 BIG-IP Network devices
  • High 7.5
    CVE-2025-36504

    BIG-IP HTTP/2 vulnerability

    When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

    F5 BIG-IP BIG-IP Next CNF BIG-IP Next SPK Network devices
  • High 7.5
    CVE-2025-36525

    BIG-IP APM PingAccess Virtual Server Vulnerability

    When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

    F5 BIG-IP Network devices
  • High 7.5
    CVE-2025-36557

    BIG-IP HTTP vulnerability

    When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are…

    F5 BIG-IP BIG-IP Next CNF BIG-IP Next SPK Network devices
  • High 7.5
    CVE-2025-41399

    SCTP Vulnerability

    When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluat…

    F5 BIG-IP BIG-IP Next CNF BIG-IP Next SPK Network devices
  • High 7.5
    CVE-2025-41414

    BIG-IP HTTP/2 vulnerability

    When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

    F5 BIG-IP BIG-IP Next CNF BIG-IP Next SPK Network devices
  • High 7.5
    CVE-2025-41431

    TMM Vulnerability

    When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate in the standby BIG-IP systems in a traffic group. Note: Software versions which have reached End of Technical Sup…

    F5 BIG-IP Network devices
  • High 7.5
    CVE-2025-41433

    BIG-IP SIP ALG profile vulnerability

    When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Sof…

    F5 BIG-IP Network devices

Revision history

  1. #1.0.0

    Initiele versie

References