CVE-2022-34844mediumCWE-20

CVE-2022-34844: fallo de gravedad media en F5 BIG-IP

BIG-IP and BIG-IQ AWS vulnerability CVE-2022-34844

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear BIG-IP+ Monitorear BIG-IQ Centralized Management

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.9epss 0.7%
In BIG-IP Versions 16.1.x before 16.1.3.1 and 15.1.x before 15.1.6.1, and all versions of BIG-IQ 8.x, when the Data Plane Development Kit (DPDK)/Elastic Network Adapter (ENA) driver is used with BIG-IP or BIG-IQ on Amazon Web Services (AWS) systems, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Successful exploitation relies on conditions outside of the attacker's control. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Productos afectados
F5 · BIG-IPF5 · BIG-IQ Centralized Management
CVEs relacionadas — F5 BIG-IP

En el mismo producto, de las más peligrosas a las menos.

CVE-2022-1388CRITICALCVE-2022-1388EPSS 100.0%KEVCVE-2023-46747CRITICALBIG-IP Configuration utility unauthenticated remote code execution vulnerabilityEPSS 96.7%KEVCVE-2026-94127CRITICALBIG-IP APM OAuth vulnerabilityEPSS 26.6%KEVCVE-2023-46748HIGHBIG-IP Configuration utility authenticated SQL injection vulnerabilityEPSS 4.3%KEVCVE-2025-53521CRITICALBigIP APM VulnerabilityEPSS 2.3%KEVCVE-2022-41622HIGHiControl SOAP vulnerabilityEPSS 92.4%