CVE-2022-41806 — Vulnetix

Try Vulnetix Request Demo

CVE-2022-41806 PUBLISHED CVSS 7.5 HIGH

In versions 16.1.x before 16.1.3.2 and 15.1.x before 15.1.5.1, when BIG-IP AFM Network Address Translation policy with IPv6/IPv4 translation rules is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.

EPSS 0.68% · 71.5th percentile

Risk Scores

CVSS v3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

0.68%

71.5th percentile

Affected Products

Vendor	Product	Versions
F5	BIG-IP AFM	17.0.0, 16.1.x, 15.1.x
f5	big-ip_advanced_firewall_manager	15.1.0, 16.1.0

Timeline

Oct 19, 2022 CVE Published
Oct 22, 2022 EPSS Score
Dec 4, 2022 EPSS Score
Jan 16, 2023 EPSS Score
Feb 28, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 12, 2023 EPSS Score
May 25, 2023 EPSS Score
Jul 7, 2023 EPSS Score
Oct 2, 2023 EPSS Score
Nov 14, 2023 EPSS Score
Dec 27, 2023 EPSS Score

References

https://support.f5.com/csp/article/K00721320 url
https://support.f5.com/csp/article/K76934290 advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-41806 advisory

Open in Interactive Console →