CVE-2025-61955

CVE-2025-61955 (F5OS-A/F5OS-C) : An authenticated attacker with local access can escalate privileges on F5OS-A or F5OS-C, potentially crossing a security boundary. Affected: F5OS-A versions up to 1.8.03 (vulnerable: 1.5.1–1.5.3; fixes in 1.8.3) and F5OS-C versions up to 1.8.1/1.6.x (vulnerable ra...

CVE-2025-58096

CVE-2025-58096 affects BIG-IP TMM: when tm.tcpudptxchecksum is configured as non-default Software-only, undisclosed traffic can terminate TMM, causing DoS on the BIG-IP device. Public sources confirm this vulnerability across BIG-IP versions and provide remediation guidance. Affected BIG-IP branc...

CVE-2025-47150 F5OS SNMP vulnerability

When SNMP is configured on F5OS Appliance and Chassis systems, undisclosed requests can cause an increase in SNMP memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-47150

CVE-2025-47150 describes a SNMP handling issue on F5OS-A and F5OS-C where undisclosed SNMP requests can cause memory resource utilization to rise, potentially degrading performance or causing DoS. Connected advisories confirm affected products and provide fixes. For F5OS-A, vulnerable ranges are ...

K000149820: F5OS SNMP vulnerability CVE-2025-47150

Security Advisory Description When SNMP is configured on the F5OS-A or F5OS-C system, undisclosed requests can cause an increase in SNMP memory resource utilization. CVE-2025-47150 Impact System performance can degrade until the SNMP process is either forced to restart or is manually restarted...

K000154661: F5OS-A FIPS HSM password vulnerability CVE-2025-60013

Security Advisory Description When a highly-privileged, authenticated attacker attempts to initialize the rSeries FIPS module using a password with special shell metacharacters, arbitrary system commands may be executed, and the FIPS hardware security module HSM may fail to initialize. A successf...

PT-2025-42351

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description The system may terminate when Diffie-Hellman DH group Elliptic Curve Cryptography ECC Brainpool curves are configured within an SSL profile’s Cipher Rule or Cipher Group and applied to a...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in F5 BIG-IP that stems from an undisclosed request that could result in the termination of the bd process...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. A security vulnerability exists in F5 BIG-IP that stems from an iRule containing the HTTP::respond command that could lead to...

PT-2025-42369

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description When IPsec is configured, certain traffic can lead to the termination of the Traffic Management Microkernel TMM. This issue does not affect software versions that have reached End of...

PT-2025-42328

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions affected versions not specified Description A flaw exists in the Traffic Management Microkernel TMM of F5 BIG-IP. When a classification profile is configured on a virtual server lacking an HTTP or HTTP/2 profile, unspecified...

PT-2025-42337

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions affected versions not specified Description A flaw in the Traffic Management Microkernel TMM can lead to denial of service. When the database variable tm.tcpudptxchecksum is configured with a non-default value on a BIG-IP...

PT-2025-42342

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description An unauthenticated remote attacker can access undisclosed endpoints containing static non-sensitive information through the Configuration utility on the BIG-IP system. Recommendations At th...

PT-2025-42320

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description An iRule configured with the HTTP::respond command on a virtual server may lead to increased memory resource utilization due to undisclosed requests. Recommendations At the moment, there is...

CVE-2025-53474: Buffer Copy without Checking Size of Input

When an iRule using an ILX::call command is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-46706: Allocation of Resources Without Limits or Throttling

When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

F5 Networks BIG-IP : BIG-IP Advanced WAF and ASM bd process vulnerability (K000156624)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1. It is, therefore, affected by a vulnerability as referenced in the K000156624 advisory. When a BIG-IP Advanced WAF or ASM security policy is configured with a URL greater than 1024 characters in length for...

F5 Networks BIG-IP : BIG-IP APM vulnerability (K000156602)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.3 / 17.5.1.3. It is, therefore, affected by a vulnerability as referenced in the K000156602 advisory. When a BIG-IP APM OAuth access profile Resource Server or Resource Client is configured on a...

PT-2025-42373

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Traffic Management Microkernel TMM affected versions not specified Description Undisclosed traffic on a multi-bladed platform can cause the Traffic Management Microkernel TMM to terminate. This issue affects systems with more than on...

F5 BIG-IP Resource Management Error Vulnerability

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A resource management error vulnerability exists in the F5 BIG-IP, which stems from the fact that MPTCP-enabled TCP configurations can cause T...