PT-2025-5732 · Unknown · Traffic Management Microkernel

Published 2025-02-05 · Updated 2025-02-05 · CVE-2025-22846

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions: No specific versions are mentioned as affected, so the output is: Software (affected versions not specified)

Description: When SIP Session and Router ALG profiles are configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note that software versions which have reached End of Technical Support (EoTS) are not evaluated.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2025-05325

CVE-2025-22846

Affected Products

Traffic Management Microkernel

References · 7

• https://bdu.fstec.ru/vul/2025-05325 · Security Note
• https://my.f5.com/manage/s/article/K000139780 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-22846 · Security Note
• https://osv.dev/vulnerability/CVE-2025-22846 · Vendor Advisory
• https://twitter.com/CVEnew/status/1887197097474027947 · Twitter Post
• https://twitter.com/CveFindCom/status/1887200328111534465 · Twitter Post
• https://t.me/cvedetector/17330 · Telegram Post