3.7
CVSSv3

CVE-2022-41983

Published: 19/10/2022 Updated: 24/10/2022
CVSS v3 Base Score: 3.7 | Impact Score: 1.4 | Exploitability Score: 2.2
VMScore: 0

Vulnerability Summary

On specific hardware platforms, on BIG-IP versions 16.1.x prior to 16.1.3.1, 15.1.x prior to 15.1.7, 14.1.x prior to 14.1.5.1, and all versions of 13.1.x, while Intel QAT (QuickAssist Technology) and the AES-GCM/CCM cipher is in use, undisclosed conditions can cause BIG-IP to send data unencrypted even with an SSL Profile applied.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

f5 big-ip analytics

f5 big-ip link controller

f5 big-ip local traffic manager

f5 big-ip policy enforcement manager

f5 big-ip application security manager

f5 big-ip application acceleration manager

f5 big-ip advanced firewall manager

f5 big-ip access policy manager

f5 big-ip domain name system

f5 big-ip fraud protection service

f5 big-ip global traffic manager

f5 big-ip websafe

f5 big-ip webaccelerator

f5 big-ip ssl orchestrator

f5 big-ip edge gateway

f5 big-ip ddos hybrid defender

f5 big-ip carrier-grade nat

f5 big-ip advanced web application firewall

f5 big-ip application visibility and reporting