CVE-2025-22891 — BIG-IP PEM Vulnerability

CVE-2025-22891

BIG-IP PEM Vulnerability PUBLISHED

Description (CNA)

When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed traffic can cause the Virtual Server to stop processing new client connections and an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected (CNA)

Vendor / product	Versions
F5 / BIG-IP	affected 17.1.0 before 17.1.2; affected 16.1.0 before 16.1.5; affected 15.1.0 before *

CWE

CWE-772

References

https://my.f5.com/manage/s/article/K000139778

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.