CVE-2022-41813: BIG-IP PEM and AFM TMUI, TMSH and iControl vulnerability CVE-2022-41813

Q: What is CVE-2022-41813?

CVE-2022-41813 is a vulnerability found in F5 BIG-IP Advanced Firewall Manager and BIG-IP Policy Enforcement Manager versions 13.1.x, 14.1.x, 15.1.x, and 16.1.x.

Q: How does CVE-2022-41813 impact F5 BIG-IP?

CVE-2022-41813 can cause the Traffic Management Microkernel (TMM) to terminate on BIG-IP devices provisioned with the PEM or AFM module.

Q: What is the severity of CVE-2022-41813?

The severity of CVE-2022-41813 is medium with a CVSS score of 6.5.

Q: Which versions of F5 BIG-IP are affected by CVE-2022-41813?

CVE-2022-41813 affects F5 BIG-IP Advanced Firewall Manager and BIG-IP Policy Enforcement Manager versions 13.1.x, 14.1.x, 15.1.x, and 16.1.x.

Q: Is there a fix available for CVE-2022-41813?

Yes, F5 has released fixed versions to address the vulnerability.

Published Oct 19, 2022

Updated

In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when BIG-IP is provisioned with PEM or AFM module, an undisclosed input can cause Traffic Management Microkernel (TMM) to terminate.

Affected Software

13 affected componentsFixes available

F5 BIG-IP Advanced Firewall Manager>=13.1.0<=13.1.5

F5 BIG-IP Advanced Firewall Manager>=14.1.0<14.1.5

F5 BIG-IP Advanced Firewall Manager>=15.1.0<15.1.6.1

F5 BIG-IP Advanced Firewall Manager>=16.1.0<16.1.3.1

F5 Big-ip Policy Enforcement Manager>=13.1.0<=13.1.5

F5 Big-ip Policy Enforcement Manager>=14.1.0<14.1.5

F5 Big-ip Policy Enforcement Manager>=15.1.0<15.1.6.1

F5 Big-ip Policy Enforcement Manager>=16.1.0<16.1.3.1

F5 BIG-IP (AFM and PEM)

17.0.0

F5 BIG-IP (AFM and PEM)>=16.1.0<=16.1.3

16.1.3.1

F5 BIG-IP (AFM and PEM)>=15.1.0<=15.1.6

15.1.6.1

F5 BIG-IP (AFM and PEM)>=14.1.0<=14.1.4

14.1.5

F5 BIG-IP (AFM and PEM)>=13.1.0<=13.1.5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade F5 BIG-IP to a version that resolves this vulnerability.
Fixed in 17.0.0
Upgrade
Upgrade F5 BIG-IP to a version that resolves this vulnerability.
Fixed in 16.1.3.1
Upgrade
Upgrade F5 BIG-IP to a version that resolves this vulnerability.
Fixed in 15.1.6.1
Upgrade
Upgrade F5 BIG-IP to a version that resolves this vulnerability.
Fixed in 14.1.5
Upgrade
Upgrade BIG-IP (PEM/AFM) to a version that resolves this vulnerability.
Fixed in 16.1.3.1
Upgrade
Upgrade BIG-IP (PEM/AFM) to a version that resolves this vulnerability.
Fixed in 15.1.6.1
Upgrade
Upgrade BIG-IP (PEM/AFM) to a version that resolves this vulnerability.
Fixed in 14.1.5
Upgrade
Upgrade BIG-IP (PEM/AFM) to a version that resolves this vulnerability.
Fixed in 13.1.x

Event History

Oct 19, 2022

Advisory Published

via F5·12:01 PM

CVE Published

via MITRE·09:23 PM

Data Sourced

via MITRE·09:23 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2022-41813?

CVE-2022-41813 is a vulnerability found in F5 BIG-IP Advanced Firewall Manager and BIG-IP Policy Enforcement Manager versions 13.1.x, 14.1.x, 15.1.x, and 16.1.x.

How does CVE-2022-41813 impact F5 BIG-IP?