F5 BIG-IP APM up to 15.1.10/16.1.5/17.1.2 Traffic Management Microkernel denial of service

Summaryinfo

A vulnerability categorized as critical has been discovered in F5 BIG-IP APM up to 15.1.10/16.1.5/17.1.2. Affected by this issue is some unknown functionality of the component Traffic Management Microkernel. Executing a manipulation can lead to denial of service. This vulnerability is handled as CVE-2025-46405. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability has been found in F5 BIG-IP APM up to 15.1.10/16.1.5/17.1.2 and classified as critical. This vulnerability affects an unknown functionality of the component Traffic Management Microkernel. The manipulation with an unknown input leads to a denial of service vulnerability. The CWE definition for the vulnerability is CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. As an impact it is known to affect availability. CVE summarizes:

When Network Access is configured on a BIG-IP APM virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

The advisory is shared for download at my.f5.com. This vulnerability was named CVE-2025-46405. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1499.

The vulnerability scanner Nessus provides a plugin with the ID 249247 (F5 Networks BIG-IP : BIG-IP APM vulnerability (K000151546)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 16.1.6 or 17.1.2.2 eliminates this vulnerability.

The vulnerability is also documented in the databases at Tenable (249247) and CERT Bund (WID-SEC-2025-1823). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Affected

• F5 BIG-IP

Productinfo

Type

• Firewall Software

Vendor

• F5

Name

• BIG-IP APM

Version

• 15.1.0
• 15.1.1
• 15.1.2
• 15.1.3
• 15.1.4
• 15.1.5
• 15.1.6
• 15.1.7
• 15.1.8
• 15.1.9
• 15.1.10
• 16.1.0
• 16.1.1
• 16.1.2
• 16.1.3
• 16.1.4
• 16.1.5
• 17.1.0
• 17.1.1
• 17.1.2

License

• commercial

Website

• Vendor: https://f5.com/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion