DeutschShown in its original language — a full translation is planned for a future version.
F5 BIG-IP: Mehrere Schwachstellen
view advisory published 2025-05-07
Ein Angreifer kann mehrere Schwachstellen in F5 BIG-IP ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial-of-Service auszulösen oder Code auszuführen
01
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-41433US | — | — | ||
When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed requ… | ||||
| CVE-2025-41431US | — | — | ||
When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate in the standby BIG-IP systems in a… | ||||
| CVE-2025-41414US | — | — | ||
When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate.
Note: Software versions which have reached End of Te… | ||||
| CVE-2025-41399US | — | — | ||
When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Softw… | ||||
| CVE-2025-36557US | — | — | ||
When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.… | ||||
| CVE-2025-36525US | — | — | ||
When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to terminate.
Note: Software versions which have reached End of Te… | ||||
| CVE-2025-36504US | — | — | ||
When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization. Note: Software versions whic… | ||||
| CVE-2025-35995US | — | — | ||
When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat command is enabled on a virtual server, undisclosed requ… | ||||
| CVE-2025-31644US | — | Exploit | ||
When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attac… | ||||
02
references
External citations — patches, advisories, analysis.
- PoC auf GitHub vom 2025-05-12external
- F5 Security Advisory vom 2025-05-07external
- F5 Security Advisory vom 2025-05-07external
- F5 Security Advisory vom 2025-05-07external
- F5 Security Advisory vom 2025-05-07external
- F5 Security Advisory vom 2025-05-07external
- F5 Security Advisory vom 2025-05-07external
- F5 Security Advisory vom 2025-05-07external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan