7.5
CVSSv3

CVE-2022-26071

Published: 05/05/2022 Updated: 16/05/2022
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

On F5 BIG-IP 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5.1, 14.1.x versions before 14.1.4.6, 13.1.x versions before 13.1.5, and all versions of 12.1.x and 11.6.x, a flaw in the way reply ICMP packets are limited in the Traffic Management Microkernel (TMM) allows an malicious user to quickly scan open UDP ports. This flaw allows an off-path remote malicious user to effectively bypass source port UDP randomization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

f5 big-ip local traffic manager 11.6.1

f5 big-ip local traffic manager 12.1.2

f5 big-ip advanced firewall manager 12.1.0

f5 big-ip access policy manager 12.1.2

f5 big-ip global traffic manager 11.6.1

f5 big-ip domain name system 12.1.2

f5 big-ip policy enforcement manager 12.1.1

f5 big-ip policy enforcement manager 12.1.2

f5 big-ip advanced firewall manager 12.1.2

f5 big-ip application security manager 12.1.1

f5 big-ip access policy manager 12.1.0

f5 big-ip access policy manager 12.1.1

f5 big-ip advanced firewall manager 11.6.1

f5 big-ip advanced firewall manager 12.1.1

f5 big-ip analytics 11.6.1

f5 big-ip analytics 12.1.0

f5 big-ip analytics 12.1.2

f5 big-ip application acceleration manager 11.6.1

f5 big-ip application acceleration manager 12.1.0

f5 big-ip application acceleration manager 12.1.1

f5 big-ip application acceleration manager 12.1.2

f5 big-ip application security manager 11.6.1

f5 big-ip application security manager 12.1.0

f5 big-ip domain name system 12.1.0

f5 big-ip link controller 11.6.1

f5 big-ip link controller 12.1.0

f5 big-ip link controller 12.1.1

f5 big-ip link controller 12.1.2

f5 big-ip local traffic manager 12.1.0

f5 big-ip policy enforcement manager 11.6.1

f5 big-ip access policy manager 11.6.1

f5 big-ip access policy manager 13.1.0

f5 big-ip access policy manager 14.1.0

f5 big-ip advanced firewall manager 13.1.0

f5 big-ip advanced firewall manager 14.1.0

f5 big-ip advanced firewall manager 15.1.0

f5 big-ip analytics 12.1.1

f5 big-ip analytics 13.1.0

f5 big-ip analytics 14.1.0

f5 big-ip application acceleration manager 13.1.0

f5 big-ip application acceleration manager 14.1.0

f5 big-ip application acceleration manager 15.1.0

f5 big-ip application security manager 12.1.2

f5 big-ip application security manager 13.1.0

f5 big-ip application security manager 14.1.0

f5 big-ip domain name system 11.6.1

f5 big-ip domain name system 12.1.1

f5 big-ip domain name system 13.1.0

f5 big-ip domain name system 14.1.0

f5 big-ip fraud protection service 11.6.1

f5 big-ip fraud protection service 12.1.0

f5 big-ip fraud protection service 13.1.0

f5 big-ip fraud protection service 14.1.0

f5 big-ip global traffic manager 12.1.0

f5 big-ip global traffic manager 12.1.1

f5 big-ip global traffic manager 12.1.2

f5 big-ip global traffic manager 13.1.0

f5 big-ip global traffic manager 14.1.0

f5 big-ip link controller 13.1.0

f5 big-ip link controller 14.1.0

f5 big-ip local traffic manager 12.1.1

f5 big-ip local traffic manager 13.1.0

f5 big-ip local traffic manager 14.1.0

f5 big-ip local traffic manager 15.1.0

f5 big-ip policy enforcement manager 11.6.2

f5 big-ip policy enforcement manager 12.1.0

f5 big-ip policy enforcement manager 12.1.3

f5 big-ip policy enforcement manager 13.1.0

f5 big-ip policy enforcement manager 14.1.0

f5 big-ip policy enforcement manager 15.1.0

f5 big-ip access policy manager 11.6.2

f5 big-ip access policy manager 11.6.3

f5 big-ip access policy manager 11.6.4

f5 big-ip access policy manager 11.6.5

f5 big-ip access policy manager 12.1.3

f5 big-ip access policy manager 12.1.4

f5 big-ip access policy manager 12.1.5

f5 big-ip access policy manager 12.1.6

f5 big-ip access policy manager 13.1.1

f5 big-ip access policy manager 13.1.3

f5 big-ip access policy manager 13.1.4

f5 big-ip access policy manager 13.1.5

f5 big-ip access policy manager 14.1.2

f5 big-ip access policy manager 14.1.3

f5 big-ip access policy manager 14.1.4

f5 big-ip access policy manager 15.1.0

f5 big-ip access policy manager 15.1.1

f5 big-ip access policy manager 15.1.2

f5 big-ip access policy manager 15.1.3

f5 big-ip access policy manager 15.1.4

f5 big-ip access policy manager 15.1.5

f5 big-ip access policy manager 16.1.0

f5 big-ip access policy manager 16.1.1

f5 big-ip access policy manager 16.1.2

f5 big-ip access policy manager 17.0.0

f5 big-ip advanced firewall manager 11.6.2

f5 big-ip advanced firewall manager 11.6.3

f5 big-ip advanced firewall manager 11.6.4

f5 big-ip advanced firewall manager 11.6.5

f5 big-ip advanced firewall manager 12.1.3

f5 big-ip advanced firewall manager 12.1.4

f5 big-ip advanced firewall manager 12.1.5

f5 big-ip advanced firewall manager 12.1.6

f5 big-ip advanced firewall manager 13.1.1

f5 big-ip advanced firewall manager 13.1.3

f5 big-ip advanced firewall manager 13.1.4

f5 big-ip advanced firewall manager 13.1.5

f5 big-ip advanced firewall manager 14.1.2

f5 big-ip advanced firewall manager 14.1.3

f5 big-ip advanced firewall manager 14.1.4

f5 big-ip advanced firewall manager 15.1.1

f5 big-ip advanced firewall manager 15.1.2

f5 big-ip advanced firewall manager 15.1.3

f5 big-ip advanced firewall manager 15.1.4

f5 big-ip advanced firewall manager 15.1.5

f5 big-ip advanced firewall manager 16.1.0

f5 big-ip advanced firewall manager 16.1.1

f5 big-ip advanced firewall manager 16.1.2

f5 big-ip advanced firewall manager 17.0.0

f5 big-ip analytics 14.1.4

f5 big-ip analytics 15.1.0

f5 big-ip analytics 15.1.2

f5 big-ip analytics 15.1.3

f5 big-ip analytics 15.1.4

f5 big-ip analytics 15.1.5

f5 big-ip analytics 16.1.0

f5 big-ip analytics 16.1.1

f5 big-ip analytics 16.1.2

f5 big-ip analytics 17.0.0

f5 big-ip application acceleration manager 14.1.4

f5 big-ip application acceleration manager 16.1.0

f5 big-ip application security manager 14.1.4

f5 big-ip application security manager 15.1.0

f5 big-ip application security manager 16.1.0

f5 big-ip domain name system 14.1.4

f5 big-ip domain name system 15.1.0

f5 big-ip domain name system 16.1.0

f5 big-ip fraud protection service 14.1.4

f5 big-ip fraud protection service 15.1.0

f5 big-ip fraud protection service 16.1.0

f5 big-ip global traffic manager 14.1.4

f5 big-ip global traffic manager 15.1.0

f5 big-ip global traffic manager 16.1.0

f5 big-ip link controller 14.1.4

f5 big-ip link controller 15.1.0

f5 big-ip link controller 16.1.0

f5 big-ip local traffic manager 14.1.4

f5 big-ip local traffic manager 16.1.0

f5 big-ip policy enforcement manager 14.1.4

f5 big-ip policy enforcement manager 16.1.0

f5 big-ip analytics 11.6.2

f5 big-ip analytics 11.6.3

f5 big-ip analytics 11.6.4

f5 big-ip analytics 11.6.5

f5 big-ip analytics 12.1.3

f5 big-ip analytics 12.1.4

f5 big-ip analytics 12.1.5

f5 big-ip analytics 12.1.6

f5 big-ip analytics 13.1.1

f5 big-ip analytics 13.1.3

f5 big-ip analytics 13.1.4

f5 big-ip analytics 13.1.5

f5 big-ip analytics 14.1.2

f5 big-ip analytics 14.1.3

f5 big-ip analytics 15.1.1

f5 big-ip application acceleration manager 11.6.2

f5 big-ip application acceleration manager 11.6.3

f5 big-ip application acceleration manager 11.6.4

f5 big-ip application acceleration manager 11.6.5

f5 big-ip application acceleration manager 12.1.3

f5 big-ip application acceleration manager 12.1.4

f5 big-ip application acceleration manager 12.1.5

f5 big-ip application acceleration manager 12.1.6

f5 big-ip application acceleration manager 13.1.1

f5 big-ip application acceleration manager 13.1.3

f5 big-ip application acceleration manager 13.1.4

f5 big-ip application acceleration manager 13.1.5

f5 big-ip application acceleration manager 14.1.2

f5 big-ip application acceleration manager 14.1.3

f5 big-ip application acceleration manager 15.1.1

f5 big-ip application acceleration manager 15.1.2

f5 big-ip application acceleration manager 15.1.3

f5 big-ip application acceleration manager 15.1.4

f5 big-ip application acceleration manager 15.1.5

f5 big-ip application acceleration manager 16.1.1

f5 big-ip application acceleration manager 16.1.2

f5 big-ip application acceleration manager 17.0.0

f5 big-ip application security manager 11.6.2

f5 big-ip application security manager 11.6.3

f5 big-ip application security manager 11.6.4

f5 big-ip application security manager 11.6.5

f5 big-ip application security manager 12.1.3

f5 big-ip application security manager 12.1.4

f5 big-ip application security manager 12.1.5

f5 big-ip application security manager 12.1.6

f5 big-ip application security manager 13.1.1

f5 big-ip application security manager 13.1.3

f5 big-ip application security manager 13.1.4

f5 big-ip application security manager 13.1.5

f5 big-ip application security manager 14.1.2

f5 big-ip application security manager 14.1.3

f5 big-ip application security manager 15.1.1

f5 big-ip application security manager 15.1.2

f5 big-ip application security manager 15.1.3

f5 big-ip application security manager 15.1.4

f5 big-ip application security manager 15.1.5

f5 big-ip application security manager 16.1.1

f5 big-ip application security manager 16.1.2

f5 big-ip application security manager 17.0.0

f5 big-ip fraud protection service 12.1.6

f5 big-ip fraud protection service 13.1.1

f5 big-ip fraud protection service 13.1.3

f5 big-ip fraud protection service 13.1.4

f5 big-ip fraud protection service 13.1.5

f5 big-ip fraud protection service 14.1.2

f5 big-ip fraud protection service 14.1.3

f5 big-ip fraud protection service 15.1.1

f5 big-ip fraud protection service 15.1.2

f5 big-ip fraud protection service 15.1.3

f5 big-ip fraud protection service 15.1.4

f5 big-ip fraud protection service 15.1.5

f5 big-ip fraud protection service 16.1.1

f5 big-ip fraud protection service 16.1.2

f5 big-ip fraud protection service 17.0.0

f5 big-ip global traffic manager 11.6.2

f5 big-ip global traffic manager 11.6.3

f5 big-ip global traffic manager 11.6.4

f5 big-ip global traffic manager 11.6.5

f5 big-ip global traffic manager 12.1.3

f5 big-ip global traffic manager 12.1.4

f5 big-ip global traffic manager 12.1.5

f5 big-ip global traffic manager 12.1.6

f5 big-ip global traffic manager 13.1.1

f5 big-ip global traffic manager 13.1.3

f5 big-ip global traffic manager 13.1.4

f5 big-ip global traffic manager 13.1.5

f5 big-ip global traffic manager 14.1.2

f5 big-ip global traffic manager 14.1.3

f5 big-ip global traffic manager 15.1.1

f5 big-ip global traffic manager 15.1.2

f5 big-ip global traffic manager 15.1.3

f5 big-ip global traffic manager 15.1.4

f5 big-ip global traffic manager 15.1.5

f5 big-ip global traffic manager 16.1.1

f5 big-ip global traffic manager 16.1.2

f5 big-ip global traffic manager 17.0.0

f5 big-ip link controller 11.6.2

f5 big-ip link controller 11.6.3

f5 big-ip link controller 11.6.4

f5 big-ip link controller 11.6.5

f5 big-ip link controller 12.1.3

f5 big-ip link controller 12.1.4

f5 big-ip link controller 12.1.5

f5 big-ip link controller 12.1.6

f5 big-ip link controller 13.1.1

f5 big-ip link controller 13.1.3

f5 big-ip link controller 13.1.4

f5 big-ip link controller 13.1.5

f5 big-ip link controller 14.1.2

f5 big-ip link controller 14.1.3

f5 big-ip link controller 15.1.1

f5 big-ip link controller 15.1.2

f5 big-ip link controller 15.1.3

f5 big-ip link controller 15.1.4

f5 big-ip link controller 15.1.5

f5 big-ip link controller 16.1.1

f5 big-ip link controller 16.1.2

f5 big-ip link controller 17.0.0

f5 big-ip local traffic manager 11.6.2

f5 big-ip local traffic manager 11.6.3

f5 big-ip local traffic manager 11.6.4

f5 big-ip local traffic manager 11.6.5

f5 big-ip local traffic manager 12.1.3

f5 big-ip local traffic manager 12.1.4

f5 big-ip local traffic manager 12.1.5

f5 big-ip local traffic manager 12.1.6

f5 big-ip local traffic manager 13.1.1

f5 big-ip local traffic manager 13.1.3

f5 big-ip local traffic manager 13.1.4

f5 big-ip local traffic manager 13.1.5

f5 big-ip local traffic manager 14.1.2

f5 big-ip local traffic manager 14.1.3

f5 big-ip local traffic manager 15.1.1

f5 big-ip local traffic manager 15.1.2

f5 big-ip local traffic manager 15.1.3

f5 big-ip local traffic manager 15.1.4

f5 big-ip local traffic manager 15.1.5

f5 big-ip local traffic manager 16.1.1

f5 big-ip local traffic manager 16.1.2

f5 big-ip local traffic manager 17.0.0

f5 big-ip policy enforcement manager 11.6.3

f5 big-ip policy enforcement manager 11.6.4

f5 big-ip policy enforcement manager 11.6.5

f5 big-ip policy enforcement manager 12.1.4

f5 big-ip policy enforcement manager 12.1.5

f5 big-ip policy enforcement manager 12.1.6

f5 big-ip policy enforcement manager 13.1.1

f5 big-ip policy enforcement manager 13.1.3

f5 big-ip policy enforcement manager 13.1.4

f5 big-ip policy enforcement manager 13.1.5

f5 big-ip policy enforcement manager 14.1.2

f5 big-ip policy enforcement manager 14.1.3

f5 big-ip policy enforcement manager 15.1.1

f5 big-ip policy enforcement manager 15.1.2

f5 big-ip policy enforcement manager 15.1.3

f5 big-ip policy enforcement manager 15.1.4

f5 big-ip policy enforcement manager 15.1.5

f5 big-ip policy enforcement manager 16.1.1

f5 big-ip policy enforcement manager 16.1.2

f5 big-ip policy enforcement manager 17.0.0

f5 big-ip domain name system 11.6.2

f5 big-ip domain name system 11.6.3

f5 big-ip domain name system 11.6.4

f5 big-ip domain name system 11.6.5

f5 big-ip domain name system 12.1.3

f5 big-ip domain name system 12.1.4

f5 big-ip domain name system 12.1.5

f5 big-ip domain name system 12.1.6

f5 big-ip domain name system 13.1.1

f5 big-ip domain name system 13.1.3

f5 big-ip domain name system 13.1.4

f5 big-ip domain name system 13.1.5

f5 big-ip domain name system 14.1.2

f5 big-ip domain name system 14.1.3

f5 big-ip domain name system 15.1.1

f5 big-ip domain name system 15.1.2

f5 big-ip domain name system 15.1.3

f5 big-ip domain name system 15.1.4

f5 big-ip domain name system 15.1.5

f5 big-ip domain name system 16.1.1

f5 big-ip domain name system 16.1.2

f5 big-ip domain name system 17.0.0

f5 big-ip fraud protection service 11.6.2

f5 big-ip fraud protection service 11.6.3

f5 big-ip fraud protection service 11.6.4

f5 big-ip fraud protection service 11.6.5

f5 big-ip fraud protection service 12.1.1

f5 big-ip fraud protection service 12.1.2

f5 big-ip fraud protection service 12.1.3

f5 big-ip fraud protection service 12.1.4

f5 big-ip fraud protection service 12.1.5