Skip to content
OpenAdvisories
High · 7.5 CVE-2025-52585 EUVD-2025-24640GHSA-qrp9-vxp3-2xw6

BIG-IP Client SSL profile vulnerability

Published Aug 13, 2025 · Updated Aug 13, 2025 · Assigned by f5

Description

When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman (ADH) ciphers enabled, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffectedFixed
F5 BIG-IP 17.1.0 – < 17.1.2.2, 16.1.0 – < 16.1.6, 15.1.0 17.1.2.2

Advisories 1

References