DeutschShown in its original language — a full translation is planned for a future version.
F5 BIG-IP: Mehrere Schwachstellen
view advisory published 2025-08-13
Ein entfernter anonymer oder lokaler Angreifer kann mehrere Schwachstellen in F5 BIG-IP ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder erhöhte Privilegien zu erlangen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-54500US | medium5.3 | — | ||
An HTTP/2 implementation flaw allows a denial-of-service (DoS) that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit (HTTP/2 MadeYouReset Att… | ||||
| CVE-2025-52585US | — | — | ||
When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman (ADH) ciphers enabled, undisclosed requests can c… | ||||
| CVE-2025-48500US | — | — | ||
A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to… | ||||
| CVE-2025-46405US | — | — | ||
When Network Access is configured on a BIG-IP APM virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.
Note: Software versions… | ||||
02
references
External citations — patches, advisories, analysis.
- F5 Security Advisory K000141436 vom 2025-08-13external
- F5 Security Advisory K000151546 vom 2025-08-13external
- F5 Security Advisory K000151782 vom 2025-08-13external
- F5 Security Advisory K000152001 vom 2025-08-13external
- F5 Quarterly Security Notification (August 2025) vom 2025-08-13external
- WID-SEC-W-2025-1823 - CSAF Versionself
- WID-SEC-2025-1823 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan