F5 Big-ip Advanced Firewall Manager any version

On BIG-IP version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x, when a message routing type virtual server is configured with both Diameter Session and Router Profiles, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

On BIG-IP version 16.1.x before 16.1.2, when any of the following configurations are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate: HTTP redirect rule in an LTM policy, BIG-IP APM Access Profile, and Explicit HTTP Proxy in HTTP Profile. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.2, and all versions of 13.1.x, when the IPsec application layer gateway (ALG) logging profile is configured on an IPsec ALG virtual server, undisclosed IPsec traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, when a SIP ALG profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

On BIG-IP 15.0.0 and 14.1.0-14.1.0.6, under certain conditions, network protections on the management port do not follow current best practices.

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, the Traffic Management Microkernel (TMM) may stop responding when processing Stream Control Transmission Protocol (SCTP) traffic under certain conditions. This vulnerability affects TMM by way of a virtual server configured with an SCTP profile. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6 and all versions of BIG-IQ 7.x and 6.x, an authenticated attacker with access to iControl REST over the control plane may be able to take advantage of a race condition to execute commands with an elevated privilege level. This vulnerability is due to an incomplete fix for CVE-2017-6167. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.

BIG-IP TLS 1.3 iRule vulnerability CVE-2022-34651

BIG-IP Message Routing MQTT vulnerability CVE-2022-35240

TMM vulnerability CVE-2022-34655

HTTP2 profile vulnerability CVE-2022-35236

BIG-IP and BIG-IQ AWS vulnerability CVE-2022-34844

BIG-IP iRules vulnerability CVE-2022-41624

BIG-IP iRule vulnerability CVE-2022-41833

BIG-IP software SYN cookies vulnerability CVE-2022-36795

BIG-IP SIP vulnerability CVE-2022-41832

BIG-IP AFM NAT64 Policy Vulnerability CVE-2022-41806

BIG-IP SSL OCSP Authentication profile vulnerability

On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, and 14.1.2.6-14.1.4.4, when a Client SSL profile is configured on a virtual server with Client Certificate Authentication set to request/require and Session Ticket enabled and configured, processing SSL traffic can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

BIG-IP AFM vulnerability

BIG-IP HTTP/2 profile vulnerability

BIG-IP SIP profile vulnerability

BIG-IP SIP profile vulnerability

BIG-IP Virtual Edition vulnerability

HTTP profile vulnerability

BIG-IP UDP Profile vulnerability

BIG-IP HTTP/2 vulnerability

BIG-IP TCP Profile vulnerability

TMM Vulnerability

BIG-IP TMM vulnerability

BIG-IP AFM vulnerability

BIG-IP IPSEC vulnerability

F5 AFM Signature Matching Vulnerability

BIG-IP HTTP/2 vulnerability

TMM vulnerability CVE-2022-32455

BIG-IP HTTP MRF vulnerability CVE-2022-35272

BIG-IP TMUI XSS vulnerability

BIG-IP Configuration utility vulnerability

BIG-IP SSL Client Certificate LDAP and CRLDP Authentication profiles vulnerability

Through undisclosed methods, on F5 BIG-IP 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.2.1-11.5.6, adjacent network attackers can cause a denial of service for VCMP guest and host systems. Attack must be sourced from adjacent network (layer 2).