K31523465: BIG-IP TMM vulnerability CVE-2022-41983

🗓️ 21 Feb 2023 18:48:18Reported by f5Type

f5🔗 my.f5.com👁 42 Views

BIG-IP TMM vulnerability on Intel QAT and AES-GCM/CCM cipher may lead to unencrypted data transmission despite SSL profile, exposing confidential information to man-in-the-middle attack

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2022-41983	20 Oct 202202:20	–	circl
CNNVD	F5 BIG-IP 安全漏洞	19 Oct 202200:00	–	cnnvd
CVE	CVE-2022-41983	19 Oct 202221:26	–	cve
Cvelist	CVE-2022-41983 BIG-IP TMM Vulnerability CVE-2022-41983	19 Oct 202221:26	–	cvelist
EUVD	EUVD-2022-45087	3 Oct 202520:07	–	euvd
Tenable Nessus	F5 Networks BIG-IP : BIG-IP TMM vulnerability (K31523465)	19 Oct 202200:00	–	nessus
NCSC	Vulnerabilities fixed in several F5 products	20 Oct 202200:00	–	ncsc
NVD	CVE-2022-41983	19 Oct 202222:15	–	nvd
OSV	CVE-2022-41983	19 Oct 202222:15	–	osv
Prion	Race condition	19 Oct 202222:15	–	prion

Vulners

Node

f5 big-ip_aamRange<17.0.0

OR

f5 big-ip_afmRange<17.0.0

OR

f5 big-ip_analyticsRange<17.0.0

OR

f5 big-ip_apmRange<17.0.0

OR

f5 big-ip_asmRange<17.0.0

OR

f5 big-ip_ddos_hybrid_defenderRange<17.0.0

OR

f5 big-ip_dnsRange<17.0.0

OR

f5 big-ip_fpsRange<17.0.0

OR

f5 big-ip_link_controllerRange<17.0.0

OR

f5 big-ip_ltmRange<17.0.0

OR

f5 big-ip_pemRange<17.0.0

OR

f5 big-ip_ssl_orchestratorRange<17.0.0

OR

f5 big-ip_next_spkRange<17.0.0

OR

f5 big-ip_aamRange16.1.0–16.1.3

OR

f5 big-ip_afmRange16.1.0–16.1.3

OR

f5 big-ip_analyticsRange16.1.0–16.1.3

OR

f5 big-ip_apmRange16.1.0–16.1.3

OR

f5 big-ip_asmRange16.1.0–16.1.3

OR

f5 big-ip_ddos_hybrid_defenderRange16.1.0–16.1.3

OR

f5 big-ip_dnsRange16.1.0–16.1.3

OR

f5 big-ip_fpsRange16.1.0–16.1.3

OR

f5 big-ip_link_controllerRange16.1.0–16.1.3

OR

f5 big-ip_ltmRange16.1.0–16.1.3

OR

f5 big-ip_pemRange16.1.0–16.1.3

OR

f5 big-ip_ssl_orchestratorRange16.1.0–16.1.3

OR

f5 big-ip_next_spkRange16.1.0–16.1.3

OR

f5 big-ip_aamRange15.1.0–15.1.6

OR

f5 big-ip_afmRange15.1.0–15.1.6

OR

f5 big-ip_analyticsRange15.1.0–15.1.6

OR

f5 big-ip_apmRange15.1.0–15.1.6

OR

f5 big-ip_asmRange15.1.0–15.1.6

OR

f5 big-ip_ddos_hybrid_defenderRange15.1.0–15.1.6

OR

f5 big-ip_dnsRange15.1.0–15.1.6

OR

f5 big-ip_fpsRange15.1.0–15.1.6

OR

f5 big-ip_link_controllerRange15.1.0–15.1.6

OR

f5 big-ip_ltmRange15.1.0–15.1.6

OR

f5 big-ip_pemRange15.1.0–15.1.6

OR

f5 big-ip_ssl_orchestratorRange15.1.0–15.1.6

OR

f5 big-ip_next_spkRange15.1.0–15.1.6

OR

f5 big-ip_aamRange14.1.0–14.1.5

OR

f5 big-ip_afmRange14.1.0–14.1.5

OR

f5 big-ip_analyticsRange14.1.0–14.1.5

OR

f5 big-ip_apmRange14.1.0–14.1.5

OR

f5 big-ip_asmRange14.1.0–14.1.5

OR

f5 big-ip_ddos_hybrid_defenderRange14.1.0–14.1.5

OR

f5 big-ip_dnsRange14.1.0–14.1.5

OR

f5 big-ip_fpsRange14.1.0–14.1.5

OR

f5 big-ip_link_controllerRange14.1.0–14.1.5

OR

f5 big-ip_ltmRange14.1.0–14.1.5

OR

f5 big-ip_pemRange14.1.0–14.1.5

OR

f5 big-ip_ssl_orchestratorRange14.1.0–14.1.5

OR

f5 big-ip_next_spkRange14.1.0–14.1.5

OR

f5 big-ip_aamRange13.1.0–13.1.5

OR

f5 big-ip_afmRange13.1.0–13.1.5

OR

f5 big-ip_analyticsRange13.1.0–13.1.5

OR

f5 big-ip_apmRange13.1.0–13.1.5

OR

f5 big-ip_asmRange13.1.0–13.1.5

OR

f5 big-ip_ddos_hybrid_defenderRange13.1.0–13.1.5

OR

f5 big-ip_dnsRange13.1.0–13.1.5

OR

f5 big-ip_fpsRange13.1.0–13.1.5

OR

f5 big-ip_link_controllerRange13.1.0–13.1.5

OR

f5 big-ip_ltmRange13.1.0–13.1.5

OR

f5 big-ip_pemRange13.1.0–13.1.5

OR

f5 big-ip_ssl_orchestratorRange13.1.0–13.1.5

OR

f5 big-ip_next_spkRange13.1.0–13.1.5

08 Jan 2024 06:33Current

4.8Medium risk

Vulners AI Score4.8

CVSS 3.13.7

EPSS0.0013

SSVC

big-ip tmm intel qat aes-gcm ccm unencrypted data ssl profile man-in-the-middle confidential information.