CVE-2022-23030: Medium severity f5 access policy manager vulnerability
On version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when the BIG-IP Virtual Edition (VE) uses the ixlv driver (which is used in SR-IOV mode and requires Intel X710/XL710/XXV710 family of network adapters on the Hypervisor) and TCP Segmentation Offload configuration is enabled, undisclosed requests may cause an increase in CPU resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-23030?
CVE-2022-23030 has been classified with a high severity level due to its impact on the security of affected F5 BIG-IP products.
How do I fix CVE-2022-23030?
To mitigate CVE-2022-23030, you should upgrade your F5 BIG-IP product to versions 16.1.2, 15.1.4.1, 14.1.4.5, or above.
Which F5 BIG-IP versions are affected by CVE-2022-23030?
CVE-2022-23030 affects F5 BIG-IP versions 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x.
What components of F5 BIG-IP are impacted by CVE-2022-23030?
CVE-2022-23030 affects various components of F5 BIG-IP such as Access Policy Manager, Advanced Firewall Manager, and Application Security Manager.
Is there a workaround for CVE-2022-23030 if I cannot upgrade?
Currently, there are no recommended workarounds for CVE-2022-23030, and upgrading is the only solution to address this vulnerability.