CVE-2025-41430CWE-770denial-of-service

CVE-2025-41430

High · published October 15, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
27.1
In the wild
Unconfirmed
What it is

⚡ When BIG-IP SSL Orchestrator is enabled, some rogue traffic can crash the Traffic Management Microkernel (TMM) — a virtual party crasher throwing a wrench in your networking soirée! Think of TMM like a busy restaurant kitchen. If an unexpected delivery of mismatched ingredients arrives, it can throw the whole kitchen into chaos — and that’s basically what happens here when the wrong traffic hits! Without proper controls, an attacker could disrupt service and cause high downtime, leading to a catastrophic loss of service and impacting users relying on your network. This is like closing a popular restaurant unexpectedly; customers get frustrated, and your reputation takes a hit!

Put simply

Think of TMM like a busy restaurant kitchen. If an unexpected delivery of mismatched ingredients arrives, it can throw the whole kitchen into chaos — and that’s basically what happens here when the wrong traffic hits! This vulnerability arises when the BIG-IP SSL Orchestrator receives undisclosed traffic that the TMM cannot handle, leading to a termination of service. Essentially, it’s an unfiltered traffic scenario that allows for disruption.

What to do

Without proper controls, an attacker could disrupt service and cause high downtime, leading to a catastrophic loss of service and impacting users relying on your network. This is like closing a popular restaurant unexpectedly; customers get frustrated, and your reputation takes a hit! To protect your systems, ensure you configure traffic filters appropriately. Regularly review your network traffic management settings and apply any available patches provided by BIG-IP. If you're on a version that has reached End of Technical Support (EoTS), it’s time for an upgrade! You've got this! With these steps, you can keep your network secure and running smoothly! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00348 · 27.1th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2025-10-15T18:15Z
Affected products (4)
ProductVersionsFixed in
f5/big-ip_ssl_orchestrator≥ 15.1.0, ≤ 15.1.9—
f5/big-ip_ssl_orchestrator≥ 16.1.0, < 16.1.416.1.4
f5/big-ip_ssl_orchestrator≥ 17.1.0, < 17.1.317.1.3
f5/big-ip_ssl_orchestratorall versions—
References (1)
EPSS history
Timeline
  • 15 OCT 13:55Z
    BIG-IP SSL Orchestrator vulnerability
    cvelistv5