CVE-2022-23011: High severity f5 access policy manager vulnerability
On certain hardware BIG-IP platforms, in version 15.1.x before 15.1.4 and 14.1.x before 14.1.3, virtual servers may stop responding while processing TCP traffic due to an issue in the SYN Cookie Protection feature. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-23011?
CVE-2022-23011 is a vulnerability that affects certain hardware BIG-IP platforms in version 15.1.x before 15.1.4 and 14.1.x before 14.1.3.
Which software versions are affected by CVE-2022-23011?
Software versions 15.1.x before 15.1.4 and 14.1.x before 14.1.3 of BIG-IP Access Policy Manager, BIG-IP Advanced Firewall Manager, BIG-IP Analytics, Big-ip Application Acceleration Manager, F5 BIG-IP Application Security Manager, Big-ip Domain Name System, Big-ip Fraud Protection Service, Big-ip Global Traffic Manager, Big-ip Link Controller, Big-ip Local Traffic Manager, and Big-ip Policy Enforcement Manager are affected by CVE-2022-23011.
What is the severity of CVE-2022-23011?
CVE-2022-23011 has a severity rating of 7.5 (High).
What is the Common Weakness Enumeration (CWE) ID of CVE-2022-23011?
CVE-2022-23011 is associated with CWE-682, which is related to incorrect calculation or conversion.
How can I fix CVE-2022-23011?
To fix CVE-2022-23011, update your BIG-IP platform to version 15.1.4 or 14.1.3, depending on the software version you are using.