PT-2022-26083 · F5 · Big-Ip

Published 2022-10-19 · Updated 2022-10-24 · CVE-2022-41813

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions BIG-IP versions 13.1.x BIG-IP versions 14.1.x through 14.1.5 BIG-IP versions 15.1.x through 15.1.6.1 BIG-IP versions 16.1.x through 16.1.3.1

Description When BIG-IP is provisioned with PEM or AFM module, an undisclosed input can cause Traffic Management Microkernel (TMM) to terminate.

Recommendations For versions 13.1.x, update to a version outside of this range to resolve the issue. For versions 14.1.x through 14.1.5, update to version 14.1.5 or later to resolve the issue. For versions 15.1.x through 15.1.6.1, update to version 15.1.6.1 or later to resolve the issue. For versions 16.1.x through 16.1.3.1, update to version 16.1.3.1 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2022-41813

Affected Products

Big-Ip

References · 4

• https://osv.dev/vulnerability/CVE-2022-41813 · Vendor Advisory
• https://support.f5.com/csp/article/K93723284 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-41813 · Security Note
• https://t.me/cibsecurity/51852 · Telegram Post