Code injection

2023-02-0118:15:00

PRIOn knowledge base

www.prio-n.com

big-ip

afm

nat policies

tmm

termination

vulnerability

0.001 Low

EPSS

Percentile

33.8%

JSON

On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a BIG-IP AFM NAT policy with a destination NAT rule is configured on a FastL4 virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CPENameOperatorVersion
big-ip_advanced_firewall_managerge13.1.0
big-ip_advanced_firewall_managerle13.1.5
big-ip_advanced_firewall_managerge14.1.0
big-ip_advanced_firewall_managerlt14.1.5.3
big-ip_advanced_firewall_managerge15.1.0
big-ip_advanced_firewall_managerlt15.1.8
big-ip_advanced_firewall_managerge16.1.0
big-ip_advanced_firewall_managerlt16.1.3.3
big-ip_advanced_firewall_managerge17.0.0
big-ip_advanced_firewall_managerlt17.0.0.2

Name	Operator	Version
big-ip_advanced_firewall_manager	ge	13.1.0
big-ip_advanced_firewall_manager	le	13.1.5
big-ip_advanced_firewall_manager	ge	14.1.0
big-ip_advanced_firewall_manager	lt	14.1.5.3
big-ip_advanced_firewall_manager	ge	15.1.0
big-ip_advanced_firewall_manager	lt	15.1.8
big-ip_advanced_firewall_manager	ge	16.1.0
big-ip_advanced_firewall_manager	lt	16.1.3.3
big-ip_advanced_firewall_manager	ge	17.0.0
big-ip_advanced_firewall_manager	lt	17.0.0.2

References

my.f5.com/manage/s/article/K46048342

0.001 Low

EPSS

Percentile

33.8%

JSON

Related for PRION:CVE-2023-22281