Skip to content
OpenAdvisories
Medium WID-SEC-2025-1823 4 CVEs

F5 BIG-IP: Mehrere Schwachstellen

Published Aug 13, 2025 · Updated Aug 13, 2025 · de-DE

Vendor: F5 Product: BIG-IP

Summary

Ein entfernter anonymer oder lokaler Angreifer kann mehrere Schwachstellen in F5 BIG-IP ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder erhöhte Privilegien zu erlangen.

Product

F5 FirePass ist ein SSL-VPN Gateway der F5 Corporation. Die BIG-IP ist eine Netzwerk Appliance auf der die meisten F5 Produkte laufen.

Vulnerabilities 4

  • High 7.5
    CVE-2025-46405

    BIG-IP APM vulnerability

    When Network Access is configured on a BIG-IP APM virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

    F5 BIG-IP Network devices
  • High 7.5
    CVE-2025-52585

    BIG-IP Client SSL profile vulnerability

    When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman (ADH) ciphers enabled, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software vers…

    F5 BIG-IP Network devices
  • High 7.3
    CVE-2025-48500

    BIG-IP APM VPN web client for macOS vulnerability

    A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer.  Note: Software versions which h…

    F5 BIG-IP BIG-IP Edge Client Network devices Browsers
  • Medium 5.3
    CVE-2025-54500

    HTTP/2 Vulnerability

    An HTTP/2 implementation flaw allows a denial-of-service (DoS) that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit (HTTP/2 MadeYouReset Attack).  Note: Software versions which have reached End of Technical Support (EoT…

    F5 BIG-IP BIG-IP Next CNF BIG-IP Next SPK Network devices

Revision history

  1. #1

    Initiale Fassung

References