PT-2022-15782 · F5 · Big-Ip

Published 2022-01-25 · Updated 2022-02-01 · CVE-2022-23014

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 15.1.x through 15.1.4.0 F5 BIG-IP versions 16.1.x through 16.1.1

Description The issue occurs when BIG-IP APM portal access is configured on a virtual server, allowing undisclosed requests to cause the Traffic Management Microkernel (TMM) to terminate.

Recommendations For versions 15.1.x through 15.1.4.0, update to version 15.1.4.1 or later. For versions 16.1.x through 16.1.1, update to version 16.1.2 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2022-23014

Affected Products

Big-Ip

References · 3

• https://osv.dev/vulnerability/CVE-2022-23014 · Vendor Advisory
• https://support.f5.com/csp/article/K93526903 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23014 · Security Note