{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-21T13:13:50.074","vulnerabilities":[{"cve":{"id":"CVE-2022-35272","sourceIdentifier":"f5sirt@f5.com","published":"2022-08-04T18:15:10.823","lastModified":"2026-06-17T04:51:42.030","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In BIG-IP Versions 17.0.x before 17.0.0.1 and 16.1.x before 16.1.3.1, when source-port preserve-strict is configured on an HTTP Message Routing Framework (MRF) virtual server, undisclosed traffic may cause the Traffic Management Microkernel (TMM) to produce a core file and the connection to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."},{"lang":"es","value":"En BIG-IP versiones 17.0.x anteriores a 17.0.0.1 y 16.1.x anteriores a 16.1.3.1, cuando es configurado source-port preserve-strict en un servidor virtual HTTP Message Routing Framework (MRF), el tráfico no revelado puede causar a el Traffic Management Microkernel (TMM) producir un archivo de núcleo y que la conexión termine. Nota: Las versiones de software que han alcanzado el fin del soporte técnico (EoTS) no son evaluadas"}],"affected":[{"source":"f5sirt@f5.com","affectedData":[{"vendor":"F5","product":"BIG-IP","versions":[{"version":"13.1.0","lessThan":"13.1.x*","versionType":"custom","status":"unaffected"},{"version":"14.1.0","lessThan":"14.1.x*","versionType":"custom","status":"unaffected"},{"version":"15.1.0","lessThan":"15.1.x*","versionType":"custom","status":"unaffected"},{"version":"16.1.x","lessThan":"16.1.3.1","versionType":"custom","status":"affected"},{"version":"17.0.x","lessThan":"17.0.0.1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"f5sirt@f5.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}]},"weaknesses":[{"source":"f5sirt@f5.com","type":"Secondary","description":[{"lang":"en","value":"CWE-404"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"16.1.0","versionEndExcluding":"16.1.3.1","matchCriteriaId":"AE0DB896-63DC-4622-A4DA-5B77A919EDF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:17.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AD637AF5-F7D1-428F-955E-16756B7476E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"16.1.0","versionEndExcluding":"16.1.3.1","matchCriteriaId":"EE0CE38A-7167-4DE4-BB9D-CD6DF81FE0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:17.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C8332960-4AAE-4101-8FFF-2D07B6479BD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*","versionStartIncluding":"16.1.0","versionEndExcluding":"16.1.3.1","matchCriteriaId":"1BC32350-1D2B-4284-941B-8B98305C45F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:17.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DA0A9081-15D2-44F7-B66E-5C594F7C8066"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"16.1.0","versionEndExcluding":"16.1.3.1","matchCriteriaId":"83ACDEF1-CF4F-41BF-B256-EA7198BB9208"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:17.0.0:*:*:*:*:*:*:*","matchCriteriaId":"EDEBE106-40F1-439C-8154-187D89988C3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"16.1.0","versionEndExcluding":"16.1.3.1","matchCriteriaId":"179FECCD-2795-4194-BED0-18CFEF792E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:17.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E9AB53DF-7335-462E-B8CD-44DF0DCE3826"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","versionStartIncluding":"16.1.0","versionEndExcluding":"16.1.3.1","matchCriteriaId":"37684CEC-10C0-4B3C-B8F1-BBAAF3C08B61"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:17.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DC4E36FE-C4C7-4C00-A65A-41F50FCE017D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*","versionStartIncluding":"16.1.0","versionEndExcluding":"16.1.3.1","matchCriteriaId":"58B1F7D1-80E2-4C5E-967C-C48244BA7B43"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:17.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4D0954BD-CC9C-448F-A9C1-3FB71AB27D6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"16.1.0","versionEndExcluding":"16.1.3.1","matchCriteriaId":"4FE45D7A-BBB1-41AB-B980-B0BE9A3B5E83"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:17.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B04EE3A2-A09D-41C3-A5F2-DAC007041B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","versionStartIncluding":"16.1.0","versionEndExcluding":"16.1.3.1","matchCriteriaId":"6A57376D-044D-46E4-9702-ECEF1F8A6380"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:17.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B147BB-1B2E-4F40-9FA7-1165B8F0B60D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"16.1.0","versionEndExcluding":"16.1.3.1","matchCriteriaId":"330DF580-A2F8-43A9-A73A-18DAE744352A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:17.0.0:*:*:*:*:*:*:*","matchCriteriaId":"73FB842B-33B1-4AD4-AC61-47192A87A785"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"16.1.0","versionEndExcluding":"16.1.3.1","matchCriteriaId":"EA2E069B-1FD5-48BE-9468-9C70C2BC30C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:17.0.0:*:*:*:*:*:*:*","matchCriteriaId":"509A4307-3EC4-4AE7-AF72-3C2B3CF9E754"}]}]}],"references":[{"url":"https://support.f5.com/csp/article/K90024104","source":"f5sirt@f5.com","tags":["Vendor Advisory"]},{"url":"https://support.f5.com/csp/article/K90024104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}