CVE-2025-47150CWE-401

CVE-2025-47150

Medium · published October 15, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
30.5
In the wild
Unconfirmed
What it is

When SNMP is configured on F5OS Appliance and Chassis systems, undisclosed requests can cause an increase in SNMP memory resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00377 · 30.5th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2025-10-15T18:15Z
Affected products (3)
ProductVersionsFixed in
f5/f5os-a≥ 1.5.1, < 1.5.31.5.3
f5/f5os-a≥ 1.8.0, < 1.8.31.8.3
f5/f5os-c≥ 1.6.0, < 1.6.41.6.4
References (1)
https://my.f5.com/manage/s/article/K000149820 · [email protected]
EPSS history
Timeline
  • 15 OCT 13:55Z
    F5OS SNMP vulnerability
    cvelistv5