CVE-2022-27181
published 2022-05-05CVE-2022-27181: On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and…
PriorityP428medium5.3CVSS 3.1
AVNACLPRNUINSUCNINAL
EPSS
0.85%
54.2th percentile
On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when APM is configured on a virtual server and the associated access profile is configured with APM AAA NTLM Auth, undisclosed requests can cause an increase in internal resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Affected
25 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| f5 | big-ip_access_policy_manager | — | — |
| f5 | big-ip_access_policy_manager | — | — |
| f5 | big-ip_access_policy_manager | — | — |
| f5 | big-ip_access_policy_manager | — | — |
| f5 | big-ip_access_policy_manager | — | — |
| f5 | big-ip_access_policy_manager | — | — |
| f5 | big-ip_access_policy_manager | — | — |
| f5 | big-ip_access_policy_manager | — | — |
| f5 | big-ip_access_policy_manager | — | — |
| f5 | big-ip_access_policy_manager | — | — |
| f5 | big-ip_access_policy_manager | — | — |
| f5 | big-ip_access_policy_manager | — | — |
| f5 | big-ip_access_policy_manager | — | — |
| f5 | big-ip_access_policy_manager | — | — |
| f5 | big-ip_access_policy_manager | — | — |
| f5 | big-ip_access_policy_manager | — | — |
| f5 | big-ip_access_policy_manager | — | — |
| f5 | big-ip_access_policy_manager | — | — |
| f5 | big-ip_apm | — | — |
| f5 | big-ip_apm | — | — |
| f5 | big-ip_apm | — | — |
| f5 | big-ip_apm | >= 13.1.x < 13.1.5 | 13.1.5 |
| f5 | big-ip_apm | >= 14.1.x < 14.1.4.6 | 14.1.4.6 |
| f5 | big-ip_apm | >= 15.1.x < 15.1.5.1 | 15.1.5.1 |
| f5 | big-ip_apm | >= 16.1.x < 16.1.2.2 | 16.1.2.2 |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
F5
CVE-2022-27181: On F5 BIG-IP APM 16
vendor_f5·2022-05-05·CVSS 5.3
CVE-2022-27181 [MEDIUM] CWE-400 CVE-2022-27181: On F5 BIG-IP APM 16
CVE-2022-27181: On F5 BIG-IP APM 16
On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when APM is configured on a virtual server and the associated access profile is configured with APM AAA NTLM Auth, undisclosed requests can cause an increase in internal resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Affected Products: BIG-IP APM
Affected Versions: 13.1.0; 13.1.1; 13.1.3; 13.1.4; 13.1.5; 14.1.0; 14.1.2; 14.1.3; 14.1.4; 15.1.0
F5 Advisory Articles: K93543114
F5 References: https://support.f5.com/csp/article/K93543114
GHSA
GHSA-gffv-3cv9-q7fg: On F5 BIG-IP APM 16
ghsa_unreviewed·2022-05-06
CVE-2022-27181 [MEDIUM] CWE-400 GHSA-gffv-3cv9-q7fg: On F5 BIG-IP APM 16
On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when APM is configured on a virtual server and the associated access profile is configured with APM AAA NTLM Auth, undisclosed requests can cause an increase in internal resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-05-05
Published