CVEvulnerability

CVE-2025-22891

8.7 HIGH Published 2025-02-05 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-02-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 4.0 ([email protected])
8.7 HIGH — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-772

Description

When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed traffic can cause the Virtual Server to stop processing new client connections and an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected configurations

• f5 big-ip policy enforcement manager (>= 15.1.0 < 15.1.10.6.0.11.6) • f5 big-ip policy enforcement manager (>= 16.1.0 < 16.1.5) • f5 big-ip policy enforcement manager (>= 17.1.0 < 17.1.2)

Related

Weakness · CWE (1)

  • CWE-772 Missing Release of Resource after Effective Lifetime weakness

References