CVE-2025-60016 in BIG-IP

Sumário (Inglês)

When Diffie-Hellman (DH) group Elliptic Curve Cryptography (ECC) Brainpool curves are configured in an SSL profile's Cipher Rule or Cipher Group, and that profile is applied to a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

04/10/2025

Divulgação

15/10/2025

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
328693	F5 BIG-IP/BIG-IP Next SPK/BIG-IP Next CNF Traffic Management Microkernel Excesso de tampão	119	Não definido	Correção oficial	CVE-2025-60016

Fontes

• MITRE
• NVD
• CVE Details