NLIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Kwetsbaarheden verholpen in F5 BIG-IP
Advisory ansehen veröffentlicht 2025-05-09
F5 heeft kwetsbaarheden verholpen in de BIG-IP systemen.
01
beschreibt (11)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-46265US | —OT erhöht | — | ||
On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may be authorized with higher privilege F5OS roles. Note: Softwar… | ||||
| CVE-2025-41433US | — | — | ||
When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed requ… | ||||
| CVE-2025-41431US | — | — | ||
When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate in the standby BIG-IP systems in a… | ||||
| CVE-2025-41414US | — | — | ||
When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate.
Note: Software versions which have reached End of Te… | ||||
| CVE-2025-41399US | — | — | ||
When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Softw… | ||||
| CVE-2025-36557US | — | — | ||
When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.… | ||||
| CVE-2025-36546US | —OT erhöht | — | ||
On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication, and then enabled Appliance Mode; access via SSH key-based… | ||||
| CVE-2025-36525US | — | — | ||
When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to terminate.
Note: Software versions which have reached End of Te… | ||||
| CVE-2025-36504US | — | — | ||
When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization. Note: Software versions whic… | ||||
| CVE-2025-35995US | — | — | ||
When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat command is enabled on a virtual server, undisclosed requ… | ||||
| CVE-2025-31644US | — | Exploit | ||
When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attac… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Reference - certbundde; cveprojectv5; nvdexternal
- Reference - cveprojectv5; nvdexternal
- Reference - certbundde; cveprojectv5; nvdexternal
- Reference - cveprojectv5; nvdexternal
- Reference - certbundde; cveprojectv5; nvdexternal
- Reference - certbundde; cveprojectv5; nvdexternal
- Reference - certbundde; cveprojectv5; nvdexternal
- Reference - certbundde; cveprojectv5; nvdexternal
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan