PT-2025-42326 · F5 · F5 Big-Ip

Published 2025-10-15 · Updated 2025-10-15 · CVE-2025-53856

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions (affected versions not specified)

Description An issue exists in F5 BIG-IP systems utilizing the embedded Packet Velocity Acceleration (ePVA) feature. Undisclosed traffic can lead to the termination of the Traffic Management Microkernel (TMM). This can result in a denial-of-service condition. The vulnerability affects virtual servers, network address translation (NAT) objects, or secure network address translation (SNAT) objects that employ the ePVA feature.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-705

Related Identifiers

CVE-2025-53856

Affected Products

F5 Big-Ip

References · 5

• https://my.f5.com/manage/s/article/K000156707 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-53856 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53856 · Security Note
• https://twitter.com/ZeroPathLabs/status/1978483896405672082 · Twitter Post
• https://twitter.com/CVEnew/status/1978545076394664202 · Twitter Post