CVE-2025-55670CWE-770denial-of-service

CVE-2025-55670

Medium · published October 15, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
22.2
In the wild
Unconfirmed
What it is

On BIG-IP Next CNF, BIG-IP Next SPK, and BIG-IP Next for Kubernetes systems, repeated undisclosed API calls can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00306 · 22.2th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2025-10-15T18:15Z
Affected products (3)
ProductVersionsFixed in
f5/big-ip_next_cloud-native_network_functions≥ 1.1.0, ≤ 1.4.1—
f5/big-ip_next_for_kubernetesall versions—
f5/big-ip_next_service_proxy_for_kubernetes≥ 1.7.0, ≤ 1.9.2—
References (1)
https://my.f5.com/manage/s/article/K000154614 · [email protected]
EPSS history
Timeline
  • 15 OCT 13:55Z
    BIG-IP Next (CNF, SPK, and Kubernetes) vulnerability
    cvelistv5