VULNERABILITY INTELLIGENCE
CVE-2022-34862
CVSS score7.5 HIGH
EPSS probability1.28%
CISA KEVNot currently listed
Published2022-08-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when an LTM virtual server is configured to perform normalization, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Weakness classification
- f5sirt@f5.com: CWE-835
- nvd@nist.gov: CWE-835
Primary references
- f5sirt@f5.com — Exploit, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory