CVE-2022-34862CWE-835

TMM vulnerability CVE-2022-34862

High · published August 4, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
69.8
In the wild
Unconfirmed
What it is

In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when an LTM virtual server is configured to perform normalization, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01278 · 69.8th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2022-08-04T17:48Z
EPSS history
Timeline
  • 04 AUG 17:48Z
    TMM vulnerability CVE-2022-34862
    cvelistv5