CVE-2022-36795 - Vulnerability Details

Vendors	Products
F5	Big-ip Access Policy Manager Big-ip Advanced Firewall Manager Big-ip Analytics Big-ip Application Acceleration Manager Big-ip Application Security Manager Big-ip Domain Name System Big-ip Fraud Protection Service Big-ip Global Traffic Manager Big-ip Link Controller Big-ip Local Traffic Manager Big-ip Policy Enforcement Manager

Link	Providers
https://support.f5.com/csp/article/K52494562

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-36795", "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab", "assignerShortName": "f5", "datePublished": "2022-10-19T21:18:33.075Z", "dateUpdated": "2025-05-08T18:15:29.927Z", "dateReserved": "2022-09-30T00:00:00.000Z"}, "containers": {"cna": {"title": "BIG-IP software SYN cookies vulnerability CVE-2022-36795", "datePublic": "2022-10-19T00:00:00.000Z", "providerMetadata": {"orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab", "shortName": "f5", "dateUpdated": "2022-10-19T00:00:00.000Z"}, "descriptions": [{"lang": "en", "value": "In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, and 14.1.x before 14.1.5.1, when an LTM TCP profile with Auto Receive Window Enabled is configured on a virtual server, undisclosed traffic can cause the virtual server to stop processing new client connections."}], "affected": [{"vendor": "F5", "product": "BIG-IP", "versions": [{"version": "17.0.x", "status": "affected", "lessThan": "17.0.0.1", "versionType": "custom"}, {"version": "16.1.x", "status": "affected", "lessThan": "16.1.3.1", "versionType": "custom"}, {"version": "15.1.x", "status": "affected", "lessThan": "15.1.7", "versionType": "custom"}, {"version": "14.1.x", "status": "affected", "lessThan": "14.1.5.1", "versionType": "custom"}, {"version": "13.1.0", "status": "unaffected", "lessThan": "13.1.x*", "versionType": "custom"}]}], "references": [{"url": "https://support.f5.com/csp/article/K52494562"}], "credits": [{"lang": "en", "value": "This issue was discovered internally by F5."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-682 Incorrect Calculation", "cweId": "CWE-682"}]}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "source": {"discovery": "INTERNAL"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T10:14:28.417Z"}, "title": "CVE Program Container", "references": [{"url": "https://support.f5.com/csp/article/K52494562", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-05-08T18:15:22.722650Z", "id": "CVE-2022-36795", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-08T18:15:29.927Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2022-36795 (string)

assignerOrgId : 9dacffd4-cb11-413f-8451-fbbfd4ddc0ab (string)

assignerShortName : f5 (string)

datePublished : 2022-10-19T21:18:33.075Z (string)

dateUpdated : 2025-05-08T18:15:29.927Z (string)

dateReserved : 2022-09-30T00:00:00.000Z (string)

}

containers : { »

cna : { »

title : BIG-IP software SYN cookies vulnerability CVE-2022-36795 (string)

datePublic : 2022-10-19T00:00:00.000Z (string)

providerMetadata : { »

orgId : 9dacffd4-cb11-413f-8451-fbbfd4ddc0ab (string)

shortName : f5 (string)

dateUpdated : 2022-10-19T00:00:00.000Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, and 14.1.x before 14.1.5.1, when an LTM TCP profile with Auto Receive Window Enabled is configured on a virtual server, undisclosed traffic can cause the virtual server to stop processing new client connections. (string)

}

]

affected : [ »

0 : { »

vendor : F5 (string)

product : BIG-IP (string)

versions : [ »

0 : { »

version : 17.0.x (string)

status : affected (string)

lessThan : 17.0.0.1 (string)

versionType : custom (string)

}

1 : { »

version : 16.1.x (string)

status : affected (string)

lessThan : 16.1.3.1 (string)

versionType : custom (string)

}

2 : { »

version : 15.1.x (string)

status : affected (string)

lessThan : 15.1.7 (string)

versionType : custom (string)

}

3 : { »

version : 14.1.x (string)

status : affected (string)

lessThan : 14.1.5.1 (string)

versionType : custom (string)

}

4 : { »

version : 13.1.0 (string)

status : unaffected (string)

lessThan : 13.1.x* (string)

versionType : custom (string)

}

]

}

]

references : [ »

0 : { »

url : https://support.f5.com/csp/article/K52494562 (string)

}

]

credits : [ »

0 : { »

lang : en (string)

value : This issue was discovered internally by F5. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

version : 3.1 (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L (string)

attackVector : NETWORK (string)

attackComplexity : LOW (string)

privilegesRequired : NONE (string)

userInteraction : NONE (string)

scope : UNCHANGED (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

availabilityImpact : LOW (string)

baseScore : 5.3 (number)

baseSeverity : MEDIUM (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

lang : en (string)

description : CWE-682 Incorrect Calculation (string)

cweId : CWE-682 (string)

}

]

}

]

x_generator : { »

engine : Vulnogram 0.0.9 (string)

}

source : { »

discovery : INTERNAL (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T10:14:28.417Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://support.f5.com/csp/article/K52494562 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-05-08T18:15:22.722650Z (string)

id : CVE-2022-36795 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-05-08T18:15:29.927Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://support.f5.com/csp/article/K52494562", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T10:14:28.417Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-36795", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-05-08T18:15:22.722650Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-08T18:15:26.368Z"}}], "cna": {"title": "BIG-IP software SYN cookies vulnerability CVE-2022-36795", "source": {"discovery": "INTERNAL"}, "credits": [{"lang": "en", "value": "This issue was discovered internally by F5."}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "F5", "product": "BIG-IP", "versions": [{"status": "affected", "version": "17.0.x", "lessThan": "17.0.0.1", "versionType": "custom"}, {"status": "affected", "version": "16.1.x", "lessThan": "16.1.3.1", "versionType": "custom"}, {"status": "affected", "version": "15.1.x", "lessThan": "15.1.7", "versionType": "custom"}, {"status": "affected", "version": "14.1.x", "lessThan": "14.1.5.1", "versionType": "custom"}, {"status": "unaffected", "version": "13.1.0", "lessThan": "13.1.x*", "versionType": "custom"}]}], "datePublic": "2022-10-19T00:00:00.000Z", "references": [{"url": "https://support.f5.com/csp/article/K52494562"}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "descriptions": [{"lang": "en", "value": "In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, and 14.1.x before 14.1.5.1, when an LTM TCP profile with Auto Receive Window Enabled is configured on a virtual server, undisclosed traffic can cause the virtual server to stop processing new client connections."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-682", "description": "CWE-682 Incorrect Calculation"}]}], "providerMetadata": {"orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab", "shortName": "f5", "dateUpdated": "2022-10-19T00:00:00.000Z"}}}, "cveMetadata": {"cveId": "CVE-2022-36795", "state": "PUBLISHED", "dateUpdated": "2025-05-08T18:15:29.927Z", "dateReserved": "2022-09-30T00:00:00.000Z", "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab", "datePublished": "2022-10-19T21:18:33.075Z", "assignerShortName": "f5"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://support.f5.com/csp/article/K52494562 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T10:14:28.417Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2022-36795 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-05-08T18:15:22.722650Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-05-08T18:15:26.368Z (string)

}

]

cna : { »

title : BIG-IP software SYN cookies vulnerability CVE-2022-36795 (string)

source : { »

discovery : INTERNAL (string)

}

credits : [ »

0 : { »

lang : en (string)

value : This issue was discovered internally by F5. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 5.3 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : LOW (string)

privilegesRequired : NONE (string)

confidentialityImpact : NONE (string)

}

]

affected : [ »

0 : { »

vendor : F5 (string)

product : BIG-IP (string)

versions : [ »

0 : { »

status : affected (string)

version : 17.0.x (string)

lessThan : 17.0.0.1 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 16.1.x (string)

lessThan : 16.1.3.1 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 15.1.x (string)

lessThan : 15.1.7 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 14.1.x (string)

lessThan : 14.1.5.1 (string)

versionType : custom (string)

}

4 : { »

status : unaffected (string)

version : 13.1.0 (string)

lessThan : 13.1.x* (string)

versionType : custom (string)

}

]

}

]

datePublic : 2022-10-19T00:00:00.000Z (string)

references : [ »

0 : { »

url : https://support.f5.com/csp/article/K52494562 (string)

}

]

x_generator : { »

engine : Vulnogram 0.0.9 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, and 14.1.x before 14.1.5.1, when an LTM TCP profile with Auto Receive Window Enabled is configured on a virtual server, undisclosed traffic can cause the virtual server to stop processing new client connections. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-682 (string)

description : CWE-682 Incorrect Calculation (string)

}

]

}

]

providerMetadata : { »

orgId : 9dacffd4-cb11-413f-8451-fbbfd4ddc0ab (string)

shortName : f5 (string)

dateUpdated : 2022-10-19T00:00:00.000Z (string)

}

cveMetadata : { »

cveId : CVE-2022-36795 (string)

state : PUBLISHED (string)

dateUpdated : 2025-05-08T18:15:29.927Z (string)

dateReserved : 2022-09-30T00:00:00.000Z (string)

assignerOrgId : 9dacffd4-cb11-413f-8451-fbbfd4ddc0ab (string)

datePublished : 2022-10-19T21:18:33.075Z (string)

assignerShortName : f5 (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "E94575F8-271B-4C99-BD91-5E860E389E16", "versionEndExcluding": "14.1.5.1", "versionStartIncluding": "14.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "1E336C29-785D-4363-BB00-3ECD1FFEB579", "versionEndExcluding": "15.1.7", "versionStartIncluding": "15.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "AE0DB896-63DC-4622-A4DA-5B77A919EDF0", "versionEndExcluding": "16.1.3.1", "versionStartIncluding": "16.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "7BDA84CE-48B2-40FF-AFDB-260FBF80EDBD", "versionEndExcluding": "17.0.0.1", "versionStartIncluding": "17.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "48172A3E-435E-4E60-9775-F6C465107E52", "versionEndExcluding": "14.1.5.1", "versionStartIncluding": "14.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "1226D02E-50F2-4B75-B524-A11D045E4EB4", "versionEndExcluding": "15.1.7", "versionStartIncluding": "15.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "EE0CE38A-7167-4DE4-BB9D-CD6DF81FE0F2", "versionEndExcluding": "16.1.3.1", "versionStartIncluding": "16.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "75E67CD8-E084-4C36-BFA4-311F897CD965", "versionEndExcluding": "17.0.0.1", "versionStartIncluding": "17.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*", "matchCriteriaId": "02C65A16-56CA-4B67-9687-3E154E0C3CB8", "versionEndExcluding": "14.1.5.1", "versionStartIncluding": "14.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*", "matchCriteriaId": "0F88BE16-F358-4DCD-AB1A-9F374EF03244", "versionEndExcluding": "15.1.7", "versionStartIncluding": "15.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*", "matchCriteriaId": "1BC32350-1D2B-4284-941B-8B98305C45F0", "versionEndExcluding": "16.1.3.1", "versionStartIncluding": "16.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*", "matchCriteriaId": "489636E2-99C0-4AC5-BB8E-DF102BC10088", "versionEndExcluding": "17.0.0.1", "versionStartIncluding": "17.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "F7E87FB8-85D9-4011-9F34-5A01E8850EED", "versionEndExcluding": "14.1.5.1", "versionStartIncluding": "14.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "3E41ADFF-6B66-4251-A642-DDC13E33A643", "versionEndExcluding": "15.1.7", "versionStartIncluding": "15.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "83ACDEF1-CF4F-41BF-B256-EA7198BB9208", "versionEndExcluding": "16.1.3.1", "versionStartIncluding": "16.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "2D519C4F-22BC-4035-A495-7305CFF8CAD0", "versionEndExcluding": "17.0.0.1", "versionStartIncluding": "17.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "E4FFADE1-6D10-412B-84F2-AD6895EF8196", "versionEndExcluding": "14.1.5.1", "versionStartIncluding": "14.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "DAE8E3A1-0E66-4A4C-BA58-E22AEA8705F7", "versionEndExcluding": "15.1.7", "versionStartIncluding": "15.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "179FECCD-2795-4194-BED0-18CFEF792E9F", "versionEndExcluding": "16.1.3.1", "versionStartIncluding": "16.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "0C492BCC-5958-4FBB-B29B-113D6CE41992", "versionEndIncluding": "17.0.0.1", "versionStartIncluding": "17.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "matchCriteriaId": "BAE2D795-D387-46A5-ACD3-2D1B4AE2C2BE", "versionEndExcluding": "14.1.5.1", "versionStartIncluding": "14.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "matchCriteriaId": "313014B4-8033-4B57-B838-66EE163E86D4", "versionEndExcluding": "15.1.7", "versionStartIncluding": "15.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "matchCriteriaId": "37684CEC-10C0-4B3C-B8F1-BBAAF3C08B61", "versionEndExcluding": "16.1.3.1", "versionStartIncluding": "16.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "matchCriteriaId": "80FD1CE8-448F-493A-A1FD-C71F73BC1DBC", "versionEndExcluding": "17.0.0.1", "versionStartIncluding": "17.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*", "matchCriteriaId": "79D9E57A-C39A-438E-AE73-66B8D966ABBD", "versionEndExcluding": "14.1.5.1", "versionStartIncluding": "14.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*", "matchCriteriaId": "63CACC49-9262-413B-9541-F062FB114957", "versionEndExcluding": "15.1.7", "versionStartIncluding": "15.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*", "matchCriteriaId": "58B1F7D1-80E2-4C5E-967C-C48244BA7B43", "versionEndExcluding": "16.1.3.1", "versionStartIncluding": "16.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*", "matchCriteriaId": "216A506B-3D78-40E1-8806-CAF5723B0BE0", "versionEndExcluding": "17.0.0.1", "versionStartIncluding": "17.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "14817A84-8837-47A1-8EC0-89BFE2B7FFCE", "versionEndExcluding": "14.1.5.1", "versionStartIncluding": "14.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "574B1926-DCF5-4E9E-8368-0EBE6CAE582E", "versionEndExcluding": "15.1.7", "versionStartIncluding": "15.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "4FE45D7A-BBB1-41AB-B980-B0BE9A3B5E83", "versionEndExcluding": "16.1.3.1", "versionStartIncluding": "16.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "21F828BD-4269-41F4-B819-338B2D966F41", "versionEndExcluding": "17.0.0.1", "versionStartIncluding": "17.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*", "matchCriteriaId": "E3096F08-8022-408C-8B9D-E5C66C90F3FC", "versionEndExcluding": "14.1.5.1", "versionStartIncluding": "14.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*", "matchCriteriaId": "45E9C4FB-F76E-4A1C-AD55-7BB7A4BD303A", "versionEndExcluding": "15.1.7", "versionStartIncluding": "15.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*", "matchCriteriaId": "6A57376D-044D-46E4-9702-ECEF1F8A6380", "versionEndExcluding": "16.1.3.1", "versionStartIncluding": "16.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*", "matchCriteriaId": "110DEA26-B703-47E7-9882-249516C91611", "versionEndExcluding": "17.0.0.1", "versionStartIncluding": "17.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "81F01E35-9B1F-4779-A807-1799ACBDE603", "versionEndExcluding": "14.1.5.1", "versionStartIncluding": "14.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "E25D2597-32D7-4676-9A0C-FCAD8D8900A9", "versionEndExcluding": "15.1.7", "versionStartIncluding": "15.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "330DF580-A2F8-43A9-A73A-18DAE744352A", "versionEndExcluding": "16.1.3.1", "versionStartIncluding": "16.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "8DF1F656-90A5-409E-AB17-A4A6D45D0593", "versionEndExcluding": "17.0.0.1", "versionStartIncluding": "17.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "9294B662-A67D-41FB-88E7-5AF1998B31BE", "versionEndExcluding": "14.1.5.1", "versionStartIncluding": "14.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "7C108E49-CF06-493E-8BEE-2FA0F5999AB9", "versionEndExcluding": "15.1.7", "versionStartIncluding": "15.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "EA2E069B-1FD5-48BE-9468-9C70C2BC30C1", "versionEndExcluding": "16.1.3.1", "versionStartIncluding": "16.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "781BA15A-EC1A-4DC3-AE57-0B5B9C22D812", "versionEndExcluding": "17.0.0.1", "versionStartIncluding": "17.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, and 14.1.x before 14.1.5.1, when an LTM TCP profile with Auto Receive Window Enabled is configured on a virtual server, undisclosed traffic can cause the virtual server to stop processing new client connections."}, {"lang": "es", "value": "En BIG-IP versiones 17.0.x anteriores a 17.0.0.1, 16.1.x anteriores a 16.1.3.1, 15.1.x anteriores a 15.1.7 y 14.1.x anteriores a 14.1.5.1, cuando es configurado un perfil LTM TCP con la Ventana de Recepci\u00f3n Autom\u00e1tica Habilitada en un servidor virtual, el tr\u00e1fico no revelado puede causar que el servidor virtual deje de procesar nuevas conexiones de clientes"}], "id": "CVE-2022-36795", "lastModified": "2024-11-21T07:13:45.660", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "f5sirt@f5.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-10-19T22:15:11.447", "references": [{"source": "f5sirt@f5.com", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://support.f5.com/csp/article/K52494562"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://support.f5.com/csp/article/K52494562"}], "sourceIdentifier": "f5sirt@f5.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-682"}], "source": "f5sirt@f5.com", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : E94575F8-271B-4C99-BD91-5E860E389E16 (string)

versionEndExcluding : 14.1.5.1 (string)

versionStartIncluding : 14.1.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 1E336C29-785D-4363-BB00-3ECD1FFEB579 (string)

versionEndExcluding : 15.1.7 (string)

versionStartIncluding : 15.1.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : AE0DB896-63DC-4622-A4DA-5B77A919EDF0 (string)

versionEndExcluding : 16.1.3.1 (string)

versionStartIncluding : 16.1.0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 7BDA84CE-48B2-40FF-AFDB-260FBF80EDBD (string)

versionEndExcluding : 17.0.0.1 (string)

versionStartIncluding : 17.0.0 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 48172A3E-435E-4E60-9775-F6C465107E52 (string)

versionEndExcluding : 14.1.5.1 (string)

versionStartIncluding : 14.1.0 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 1226D02E-50F2-4B75-B524-A11D045E4EB4 (string)

versionEndExcluding : 15.1.7 (string)

versionStartIncluding : 15.1.0 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : EE0CE38A-7167-4DE4-BB9D-CD6DF81FE0F2 (string)

versionEndExcluding : 16.1.3.1 (string)

versionStartIncluding : 16.1.0 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 75E67CD8-E084-4C36-BFA4-311F897CD965 (string)

versionEndExcluding : 17.0.0.1 (string)

versionStartIncluding : 17.0.0 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 02C65A16-56CA-4B67-9687-3E154E0C3CB8 (string)

versionEndExcluding : 14.1.5.1 (string)

versionStartIncluding : 14.1.0 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 0F88BE16-F358-4DCD-AB1A-9F374EF03244 (string)

versionEndExcluding : 15.1.7 (string)

versionStartIncluding : 15.1.0 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 1BC32350-1D2B-4284-941B-8B98305C45F0 (string)

versionEndExcluding : 16.1.3.1 (string)

versionStartIncluding : 16.1.0 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 489636E2-99C0-4AC5-BB8E-DF102BC10088 (string)

versionEndExcluding : 17.0.0.1 (string)

versionStartIncluding : 17.0.0 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : F7E87FB8-85D9-4011-9F34-5A01E8850EED (string)

versionEndExcluding : 14.1.5.1 (string)

versionStartIncluding : 14.1.0 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 3E41ADFF-6B66-4251-A642-DDC13E33A643 (string)

versionEndExcluding : 15.1.7 (string)

versionStartIncluding : 15.1.0 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 83ACDEF1-CF4F-41BF-B256-EA7198BB9208 (string)

versionEndExcluding : 16.1.3.1 (string)

versionStartIncluding : 16.1.0 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 2D519C4F-22BC-4035-A495-7305CFF8CAD0 (string)

versionEndExcluding : 17.0.0.1 (string)

versionStartIncluding : 17.0.0 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : E4FFADE1-6D10-412B-84F2-AD6895EF8196 (string)

versionEndExcluding : 14.1.5.1 (string)

versionStartIncluding : 14.1.0 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : DAE8E3A1-0E66-4A4C-BA58-E22AEA8705F7 (string)

versionEndExcluding : 15.1.7 (string)

versionStartIncluding : 15.1.0 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 179FECCD-2795-4194-BED0-18CFEF792E9F (string)

versionEndExcluding : 16.1.3.1 (string)

versionStartIncluding : 16.1.0 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 0C492BCC-5958-4FBB-B29B-113D6CE41992 (string)

versionEndIncluding : 17.0.0.1 (string)

versionStartIncluding : 17.0.0 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* (string)

matchCriteriaId : BAE2D795-D387-46A5-ACD3-2D1B4AE2C2BE (string)

versionEndExcluding : 14.1.5.1 (string)

versionStartIncluding : 14.1.0 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 313014B4-8033-4B57-B838-66EE163E86D4 (string)

versionEndExcluding : 15.1.7 (string)

versionStartIncluding : 15.1.0 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 37684CEC-10C0-4B3C-B8F1-BBAAF3C08B61 (string)

versionEndExcluding : 16.1.3.1 (string)

versionStartIncluding : 16.1.0 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 80FD1CE8-448F-493A-A1FD-C71F73BC1DBC (string)

versionEndExcluding : 17.0.0.1 (string)

versionStartIncluding : 17.0.0 (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 79D9E57A-C39A-438E-AE73-66B8D966ABBD (string)

versionEndExcluding : 14.1.5.1 (string)

versionStartIncluding : 14.1.0 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 63CACC49-9262-413B-9541-F062FB114957 (string)

versionEndExcluding : 15.1.7 (string)

versionStartIncluding : 15.1.0 (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 58B1F7D1-80E2-4C5E-967C-C48244BA7B43 (string)

versionEndExcluding : 16.1.3.1 (string)

versionStartIncluding : 16.1.0 (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 216A506B-3D78-40E1-8806-CAF5723B0BE0 (string)

versionEndExcluding : 17.0.0.1 (string)

versionStartIncluding : 17.0.0 (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 14817A84-8837-47A1-8EC0-89BFE2B7FFCE (string)

versionEndExcluding : 14.1.5.1 (string)

versionStartIncluding : 14.1.0 (string)

vulnerable : true (boolean)

}

29 : { »

criteria : cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 574B1926-DCF5-4E9E-8368-0EBE6CAE582E (string)

versionEndExcluding : 15.1.7 (string)

versionStartIncluding : 15.1.0 (string)

vulnerable : true (boolean)

}

30 : { »

criteria : cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 4FE45D7A-BBB1-41AB-B980-B0BE9A3B5E83 (string)

versionEndExcluding : 16.1.3.1 (string)

versionStartIncluding : 16.1.0 (string)

vulnerable : true (boolean)

}

31 : { »

criteria : cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 21F828BD-4269-41F4-B819-338B2D966F41 (string)

versionEndExcluding : 17.0.0.1 (string)

versionStartIncluding : 17.0.0 (string)

vulnerable : true (boolean)

}

32 : { »

criteria : cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* (string)

matchCriteriaId : E3096F08-8022-408C-8B9D-E5C66C90F3FC (string)

versionEndExcluding : 14.1.5.1 (string)

versionStartIncluding : 14.1.0 (string)

vulnerable : true (boolean)

}

33 : { »

criteria : cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 45E9C4FB-F76E-4A1C-AD55-7BB7A4BD303A (string)

versionEndExcluding : 15.1.7 (string)

versionStartIncluding : 15.1.0 (string)

vulnerable : true (boolean)

}

34 : { »

criteria : cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 6A57376D-044D-46E4-9702-ECEF1F8A6380 (string)

versionEndExcluding : 16.1.3.1 (string)

versionStartIncluding : 16.1.0 (string)

vulnerable : true (boolean)

}

35 : { »

criteria : cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 110DEA26-B703-47E7-9882-249516C91611 (string)

versionEndExcluding : 17.0.0.1 (string)

versionStartIncluding : 17.0.0 (string)

vulnerable : true (boolean)

}

36 : { »

criteria : cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 81F01E35-9B1F-4779-A807-1799ACBDE603 (string)

versionEndExcluding : 14.1.5.1 (string)

versionStartIncluding : 14.1.0 (string)

vulnerable : true (boolean)

}

37 : { »

criteria : cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : E25D2597-32D7-4676-9A0C-FCAD8D8900A9 (string)

versionEndExcluding : 15.1.7 (string)

versionStartIncluding : 15.1.0 (string)

vulnerable : true (boolean)

}

38 : { »

criteria : cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 330DF580-A2F8-43A9-A73A-18DAE744352A (string)

versionEndExcluding : 16.1.3.1 (string)

versionStartIncluding : 16.1.0 (string)

vulnerable : true (boolean)

}

39 : { »

criteria : cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 8DF1F656-90A5-409E-AB17-A4A6D45D0593 (string)

versionEndExcluding : 17.0.0.1 (string)

versionStartIncluding : 17.0.0 (string)

vulnerable : true (boolean)

}

40 : { »

criteria : cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 9294B662-A67D-41FB-88E7-5AF1998B31BE (string)

versionEndExcluding : 14.1.5.1 (string)

versionStartIncluding : 14.1.0 (string)

vulnerable : true (boolean)

}

41 : { »

criteria : cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 7C108E49-CF06-493E-8BEE-2FA0F5999AB9 (string)

versionEndExcluding : 15.1.7 (string)

versionStartIncluding : 15.1.0 (string)

vulnerable : true (boolean)

}

42 : { »

criteria : cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : EA2E069B-1FD5-48BE-9468-9C70C2BC30C1 (string)

versionEndExcluding : 16.1.3.1 (string)

versionStartIncluding : 16.1.0 (string)

vulnerable : true (boolean)

}

43 : { »

criteria : cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 781BA15A-EC1A-4DC3-AE57-0B5B9C22D812 (string)

versionEndExcluding : 17.0.0.1 (string)

versionStartIncluding : 17.0.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, and 14.1.x before 14.1.5.1, when an LTM TCP profile with Auto Receive Window Enabled is configured on a virtual server, undisclosed traffic can cause the virtual server to stop processing new client connections. (string)

}

1 : { »

lang : es (string)

value : En BIG-IP versiones 17.0.x anteriores a 17.0.0.1, 16.1.x anteriores a 16.1.3.1, 15.1.x anteriores a 15.1.7 y 14.1.x anteriores a 14.1.5.1, cuando es configurado un perfil LTM TCP con la Ventana de Recepción Automática Habilitada en un servidor virtual, el tráfico no revelado puede causar que el servidor virtual deje de procesar nuevas conexiones de clientes (string)

}

]

id : CVE-2022-36795 (string)

lastModified : 2024-11-21T07:13:45.660 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : LOW (string)

baseScore : 5.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 1.4 (number)

source : f5sirt@f5.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2022-10-19T22:15:11.447 (string)

references : [ »

0 : { »

source : f5sirt@f5.com (string)

tags : [ »

0 : Mitigation (string)

1 : Vendor Advisory (string)

]

url : https://support.f5.com/csp/article/K52494562 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mitigation (string)

1 : Vendor Advisory (string)

]

url : https://support.f5.com/csp/article/K52494562 (string)

}

]

sourceIdentifier : f5sirt@f5.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-682 (string)

}

]

source : f5sirt@f5.com (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object