CVE-2022-23024

7.5 highEPSS 0.9%

High (7.5) in f5 big-ip advanced firewall manager. EPSS 0.9% chance of exploitation in the next 30 days.

On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.2, and all versions of 13.1.x, when the IPsec application layer gateway (ALG) logging profile is configured on an IPsec ALG virtual server, undisclosed IPsec traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-400
Published: 2022-01-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

f5:big-ip_advanced_firewall_manager

References

https://support.f5.com/csp/article/K54892865
https://support.f5.com/csp/article/K54892865

Check your stack JSON