High · published October 15, 2025
⚡ When a virtual server lacks the right profile, a rogue request can send the Traffic Management Microkernel (TMM) crashing down! 😱 Think of it like a restaurant without a proper menu—if a customer makes an unusual order, it could throw the whole kitchen into chaos as the chefs scramble to figure out what to do! This vulnerability could lead to significant server disruptions, causing the TMM to terminate unexpectedly. If exploited, you may experience downtime that can impact your applications and user experience, leading to potential revenue loss and frustrated customers. Yikes!
Think of it like a restaurant without a proper menu—if a customer makes an unusual order, it could throw the whole kitchen into chaos as the chefs scramble to figure out what to do! CVE-2025-54479 arises when a classification profile is set up on a virtual server that lacks an HTTP or HTTP/2 profile. This configuration flaw allows undisclosed requests to crash the TMM, interrupting normal operations.
This vulnerability could lead to significant server disruptions, causing the TMM to terminate unexpectedly. If exploited, you may experience downtime that can impact your applications and user experience, leading to potential revenue loss and frustrated customers. Yikes! To remediate this, ensure that all virtual servers are properly configured with an appropriate HTTP or HTTP/2 profile in place. Review your existing setup, and consider updating to a version that is currently supported to avoid vulnerabilities from older software. You've got this! With a few adjustments, you can fortify your defenses and keep your servers running smoothly. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| f5/big-ip_next_cloud-native_network_functions | ≥ 1.1.0, ≤ 1.4.0 | — |
| f5/big-ip_next_cloud-native_network_functions | all versions | — |
| f5/big-ip_next_cloud-native_network_functions | all versions | — |
| f5/big-ip_next_cloud-native_network_functions | all versions | — |
| f5/big-ip_next_cloud-native_network_functions | all versions | — |
| f5/big-ip_next_for_kubernetes | all versions | — |
| f5/big-ip_next_for_kubernetes | all versions | — |
| f5/big-ip_policy_enforcement_manager | ≥ 15.1.0, < 15.1.10.8 | 15.1.10.8 |
| f5/big-ip_policy_enforcement_manager | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_policy_enforcement_manager | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_policy_enforcement_manager | all versions | — |