CVEvulnerability

CVE-2022-23028

5.3 MEDIUM Published 2022-01-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-01-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-682

Description

On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when global AFM SYN cookie protection (TCP Half Open flood vector) is activated in the AFM Device Dos or DOS profile, certain types of TCP connections will fail. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected configurations

• f5 big-ip advanced firewall manager (>= 13.1.0 <= 13.1.4) • f5 big-ip advanced firewall manager (>= 14.1.0 <= 14.1.4) • f5 big-ip advanced firewall manager (>= 15.1.0 <= 15.1.4)

Related

Weakness · CWE (1)

  • CWE-682 Incorrect Calculation weakness

References