K83120834: Diffie-Hellman key agreement protocol weaknesses CVE-2002-20001 & CVE-2022-40735

🗓️ 24 Jan 2023 17:16:25Reported by f5Type

f5🔗 my.f5.com👁 164 Views

Diffie-Hellman key agreement protocol weaknesses CVE-2002-20001 & CVE-2022-40735. Allows remote attackers to trigger expensive server-side DHE calculations

Reporter	Title	Published	Views	Family All 44
ATTACKERKB	CVE-2022-40735	14 Nov 202223:15	–	attackerkb
Information Security Automation	VMconf 22: Blindspots in the Knowledge Bases of Vulnerability Scanners	18 Feb 202217:00	–	avleonov
Cloud Foundry	USN-6854-1: OpenSSL vulnerability \| Cloud Foundry	25 Jul 202400:00	–	cloudfoundry
Circl	CVE-2002-20001	11 Nov 202122:37	–	circl
Circl	CVE-2022-40735	19 Mar 202600:00	–	circl
CNNVD	Diffie-Hellman Key Agreement Protocol 资源管理错误漏洞	11 Nov 202100:00	–	cnnvd
CNNVD	Diffie-Hellman Key Agreement Protocol 资源管理错误漏洞	14 Nov 202200:00	–	cnnvd
CVE	CVE-2002-20001	11 Nov 202100:00	–	cve
CVE	CVE-2022-40735	14 Nov 202200:00	–	cve
Cvelist	CVE-2002-20001	11 Nov 202100:00	–	cvelist

Vulners

Node

f5 big-ip_apmRange17.0.0–17.1.0

OR

f5 big-ip_apmRange16.1.0–16.1.3

OR

f5 big-ip_apmRange15.1.0–15.1.10

OR

f5 big-ip_apmRange14.1.0–14.1.5

OR

f5 big-ip_apmRange13.1.0–13.1.5

OR

f5 big-ip_next_spkMatch17.5.0

OR

f5 big-ip_aamMatch17.5.0

OR

f5 big-ip_afmMatch17.5.0

OR

f5 big-ip_analyticsMatch17.5.0

OR

f5 big-ip_apmMatch17.5.0

OR

f5 big-ip_asmMatch17.5.0

OR

f5 big-ip_ddos_hybrid_defenderMatch17.5.0

OR

f5 big-ip_dnsMatch17.5.0

OR

f5 big-ip_fpsMatch17.5.0

OR

f5 big-ip_link_controllerMatch17.5.0

OR

f5 big-ip_ltmMatch17.5.0

OR

f5 big-ip_pemMatch17.5.0

OR

f5 big-ip_ssl_orchestratorMatch17.5.0

OR

f5 big-ip_next_spkRange17.0.0–17.1.2

OR

f5 big-ip_aamRange17.0.0–17.1.2

OR

f5 big-ip_afmRange17.0.0–17.1.2

OR

f5 big-ip_analyticsRange17.0.0–17.1.2

OR

f5 big-ip_apmRange17.0.0–17.1.2

OR

f5 big-ip_asmRange17.0.0–17.1.2

OR

f5 big-ip_ddos_hybrid_defenderRange17.0.0–17.1.2

OR

f5 big-ip_dnsRange17.0.0–17.1.2

OR

f5 big-ip_fpsRange17.0.0–17.1.2

OR

f5 big-ip_link_controllerRange17.0.0–17.1.2

OR

f5 big-ip_ltmRange17.0.0–17.1.2

OR

f5 big-ip_pemRange17.0.0–17.1.2

OR

f5 big-ip_ssl_orchestratorRange17.0.0–17.1.2

OR

f5 big-ip_next_spkRange16.1.0–16.1.6

OR

f5 big-ip_aamRange16.1.0–16.1.6

OR

f5 big-ip_afmRange16.1.0–16.1.6

OR

f5 big-ip_analyticsRange16.1.0–16.1.6

OR

f5 big-ip_apmRange16.1.0–16.1.6

OR

f5 big-ip_asmRange16.1.0–16.1.6

OR

f5 big-ip_ddos_hybrid_defenderRange16.1.0–16.1.6

OR

f5 big-ip_dnsRange16.1.0–16.1.6

OR

f5 big-ip_fpsRange16.1.0–16.1.6

OR

f5 big-ip_link_controllerRange16.1.0–16.1.6

OR

f5 big-ip_ltmRange16.1.0–16.1.6

OR

f5 big-ip_pemRange16.1.0–16.1.6

OR

f5 big-ip_ssl_orchestratorRange16.1.0–16.1.6

OR

f5 big-ip_next_spkRange15.1.0–15.1.10

OR

f5 big-ip_aamRange15.1.0–15.1.10

OR

f5 big-ip_afmRange15.1.0–15.1.10

OR

f5 big-ip_analyticsRange15.1.0–15.1.10

OR

f5 big-ip_apmRange15.1.0–15.1.10

OR

f5 big-ip_asmRange15.1.0–15.1.10

OR

f5 big-ip_ddos_hybrid_defenderRange15.1.0–15.1.10

OR

f5 big-ip_dnsRange15.1.0–15.1.10

OR

f5 big-ip_fpsRange15.1.0–15.1.10

OR

f5 big-ip_link_controllerRange15.1.0–15.1.10

OR

f5 big-ip_ltmRange15.1.0–15.1.10

OR

f5 big-ip_pemRange15.1.0–15.1.10

OR

f5 big-ip_ssl_orchestratorRange15.1.0–15.1.10

OR

f5 big-ip_next_spkRange14.1.0–14.1.5

OR

f5 big-ip_aamRange14.1.0–14.1.5

OR

f5 big-ip_afmRange14.1.0–14.1.5

OR

f5 big-ip_analyticsRange14.1.0–14.1.5

OR

f5 big-ip_apmRange14.1.0–14.1.5

OR

f5 big-ip_asmRange14.1.0–14.1.5

OR

f5 big-ip_ddos_hybrid_defenderRange14.1.0–14.1.5

OR

f5 big-ip_dnsRange14.1.0–14.1.5

OR

f5 big-ip_fpsRange14.1.0–14.1.5

OR

f5 big-ip_link_controllerRange14.1.0–14.1.5

OR

f5 big-ip_ltmRange14.1.0–14.1.5

OR

f5 big-ip_pemRange14.1.0–14.1.5

OR

f5 big-ip_ssl_orchestratorRange14.1.0–14.1.5

OR

f5 big-ip_next_spkRange13.1.0–13.1.5

OR

f5 big-ip_aamRange13.1.0–13.1.5

OR

f5 big-ip_afmRange13.1.0–13.1.5

OR

f5 big-ip_analyticsRange13.1.0–13.1.5

OR

f5 big-ip_apmRange13.1.0–13.1.5

OR

f5 big-ip_asmRange13.1.0–13.1.5

OR

f5 big-ip_ddos_hybrid_defenderRange13.1.0–13.1.5

OR

f5 big-ip_dnsRange13.1.0–13.1.5

OR

f5 big-ip_fpsRange13.1.0–13.1.5

OR

f5 big-ip_link_controllerRange13.1.0–13.1.5

OR

f5 big-ip_ltmRange13.1.0–13.1.5

OR

f5 big-ip_pemRange13.1.0–13.1.5

OR

f5 big-ip_ssl_orchestratorRange13.1.0–13.1.5

OR

f5 big-ip_next_spkMatch17.5.0

OR

f5 big-ip_aamMatch17.5.0

OR

f5 big-ip_afmMatch17.5.0

OR

f5 big-ip_analyticsMatch17.5.0

OR

f5 big-ip_apmMatch17.5.0

OR

f5 big-ip_asmMatch17.5.0

OR

f5 big-ip_ddos_hybrid_defenderMatch17.5.0

OR

f5 big-ip_dnsMatch17.5.0

OR

f5 big-ip_fpsMatch17.5.0

OR

f5 big-ip_link_controllerMatch17.5.0

OR

f5 big-ip_ltmMatch17.5.0

OR

f5 big-ip_pemMatch17.5.0

OR

f5 big-ip_ssl_orchestratorMatch17.5.0

OR

f5 big-ip_next_spkRange17.0.0–17.1.2

OR

f5 big-ip_aamRange17.0.0–17.1.2

OR

f5 big-ip_afmRange17.0.0–17.1.2

OR

f5 big-ip_analyticsRange17.0.0–17.1.2

OR

f5 big-ip_apmRange17.0.0–17.1.2

OR

f5 big-ip_asmRange17.0.0–17.1.2

OR

f5 big-ip_ddos_hybrid_defenderRange17.0.0–17.1.2

OR

f5 big-ip_dnsRange17.0.0–17.1.2

OR

f5 big-ip_fpsRange17.0.0–17.1.2

OR

f5 big-ip_link_controllerRange17.0.0–17.1.2

OR

f5 big-ip_ltmRange17.0.0–17.1.2

OR

f5 big-ip_pemRange17.0.0–17.1.2

OR

f5 big-ip_ssl_orchestratorRange17.0.0–17.1.2

OR

f5 big-ip_next_spkRange16.1.0–16.1.6

OR

f5 big-ip_aamRange16.1.0–16.1.6

OR

f5 big-ip_afmRange16.1.0–16.1.6

OR

f5 big-ip_analyticsRange16.1.0–16.1.6

OR

f5 big-ip_apmRange16.1.0–16.1.6

OR

f5 big-ip_asmRange16.1.0–16.1.6

OR

f5 big-ip_ddos_hybrid_defenderRange16.1.0–16.1.6

OR

f5 big-ip_dnsRange16.1.0–16.1.6

OR

f5 big-ip_fpsRange16.1.0–16.1.6

OR

f5 big-ip_link_controllerRange16.1.0–16.1.6

OR

f5 big-ip_ltmRange16.1.0–16.1.6

OR

f5 big-ip_pemRange16.1.0–16.1.6

OR

f5 big-ip_ssl_orchestratorRange16.1.0–16.1.6

OR

f5 big-ip_next_spkRange15.1.0–15.1.10

OR

f5 big-ip_aamRange15.1.0–15.1.10

OR

f5 big-ip_afmRange15.1.0–15.1.10

OR

f5 big-ip_analyticsRange15.1.0–15.1.10

OR

f5 big-ip_apmRange15.1.0–15.1.10

OR

f5 big-ip_asmRange15.1.0–15.1.10

OR

f5 big-ip_ddos_hybrid_defenderRange15.1.0–15.1.10

OR

f5 big-ip_dnsRange15.1.0–15.1.10

OR

f5 big-ip_fpsRange15.1.0–15.1.10

OR

f5 big-ip_link_controllerRange15.1.0–15.1.10

OR

f5 big-ip_ltmRange15.1.0–15.1.10

OR

f5 big-ip_pemRange15.1.0–15.1.10

OR

f5 big-ip_ssl_orchestratorRange15.1.0–15.1.10

OR

f5 big-ip_next_spkRange14.1.0–14.1.5

OR

f5 big-ip_aamRange14.1.0–14.1.5

OR

f5 big-ip_afmRange14.1.0–14.1.5

OR

f5 big-ip_analyticsRange14.1.0–14.1.5

OR

f5 big-ip_apmRange14.1.0–14.1.5

OR

f5 big-ip_asmRange14.1.0–14.1.5

OR

f5 big-ip_ddos_hybrid_defenderRange14.1.0–14.1.5

OR

f5 big-ip_dnsRange14.1.0–14.1.5

OR

f5 big-ip_fpsRange14.1.0–14.1.5

OR

f5 big-ip_link_controllerRange14.1.0–14.1.5

OR

f5 big-ip_ltmRange14.1.0–14.1.5

OR

f5 big-ip_pemRange14.1.0–14.1.5

OR

f5 big-ip_ssl_orchestratorRange14.1.0–14.1.5

OR

f5 big-ip_next_spkRange13.1.0–13.1.5

OR

f5 big-ip_aamRange13.1.0–13.1.5

OR

f5 big-ip_afmRange13.1.0–13.1.5

OR

f5 big-ip_analyticsRange13.1.0–13.1.5

OR

f5 big-ip_apmRange13.1.0–13.1.5

OR

f5 big-ip_asmRange13.1.0–13.1.5

OR

f5 big-ip_ddos_hybrid_defenderRange13.1.0–13.1.5

OR

f5 big-ip_dnsRange13.1.0–13.1.5

OR

f5 big-ip_fpsRange13.1.0–13.1.5

OR

f5 big-ip_link_controllerRange13.1.0–13.1.5

OR

f5 big-ip_ltmRange13.1.0–13.1.5

OR

f5 big-ip_pemRange13.1.0–13.1.5

OR

f5 big-ip_ssl_orchestratorRange13.1.0–13.1.5

OR

f5 big-ip_spkMatch1.6.0

OR

f5 big-iq_centralized_managementRange8.0.0–8.4.0

OR

f5 big-iq_centralized_managementMatch7.1.0

OR

f5 big-iq_centralized_managementRange8.0.0–8.4.0

OR

f5 big-iq_centralized_managementMatch7.1.0

OR

f5 f5os-aMatch1.8.0

OR

f5 f5os-aRange1.5.0–1.5.3

OR

f5 f5os-aRange1.3.0–1.3.2

OR

f5 f5os-cRange1.8.0–1.8.1

OR

f5 f5os-cRange1.6.0–1.6.2

OR

f5 f5os-cRange1.5.0–1.5.1

OR

f5 f5os-cRange1.3.0–1.3.2

OR

f5 traffix_sdcMatch5.2.0

OR

f5 traffix_sdcMatch5.1.0

31 Jul 2025 08:47Current

7.2High risk

Vulners AI Score7.2

CVSS 25

CVSS 3.17.5

EPSS0.1468

diffie-hellman key agreement protocol weaknesses remote attackers dhe calculations cve-2002-20001 cve-2022-40735 server-side exponents vulnerability cpu usage openssh.