VULNERABILITY INTELLIGENCE
CVE-2025-22891
CVSS score7.5 HIGH
EPSS probability0.41%
CISA KEVNot currently listed
Published2025-02-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed traffic can cause the Virtual Server to stop processing new client connections and an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Weakness classification
- f5sirt@f5.com: CWE-772
Primary references
- f5sirt@f5.com — Vendor Advisory