CVE-2025-22891CWE-772

BIG-IP PEM Vulnerability

High · published February 5, 2025

CVSS v4.0
8.7
EPSS
0%
Percentile
33.9
In the wild
Unconfirmed
What it is

When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed traffic can cause the Virtual Server to stop processing new client connections and an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
EPSS
0.00408 · 33.9th percentile
Weakness
CWE-772 · Missing Release of Resource after Effective Lifetime
Published
2025-02-05T17:31Z
EPSS history
Timeline
  • 05 FEB 17:31Z
    BIG-IP PEM Vulnerability
    cvelistv5