CVE-2022-28705

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-05-05 · updated 2026-06-17
Weakness: CWE-190

Description

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, on platforms with an ePVA and the pva.fwdaccel BigDB variable enabled, undisclosed requests to a virtual server with a FastL4 profile that has ePVA acceleration enabled can cause the Traffic Management Microkernel (TMM) process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Affected products

F5 BIG-IP APM: 13.1.0, 13.1.1, 13.1.3, 13.1.4, 13.1.5, 14.1.0 (+13)
BIG-IP: 13.1.0, 13.1.1, 13.1.3, 13.1.4, 13.1.5, 14.1.0 (+13)
F5 Big-Ip Analytics: 13.1.0, 13.1.1, 13.1.3, 13.1.4, 13.1.5, 14.1.0 (+13)
F5 Networks, Inc. BIG-IP (AAM): 13.1.0, 13.1.1, 13.1.3, 13.1.4, 13.1.5, 14.1.0 (+13)
BIG-IP ASM: 13.1.0, 13.1.1, 13.1.3, 13.1.4, 13.1.5, 14.1.0 (+13)
F5 BIG-IP DNS: 13.1.0, 13.1.1, 13.1.3, 13.1.4, 13.1.5, 14.1.0 (+13)
F5 Big-Ip Fraud Protection Service: 13.1.0, 13.1.1, 13.1.3, 13.1.4, 13.1.5, 14.1.0 (+13)
F5 Big-Ip Global Traffic Manager: 13.1.0, 13.1.1, 13.1.3, 13.1.4, 13.1.5, 14.1.0 (+13)
F5 Big-Ip Link Controller: 13.1.0, 13.1.1, 13.1.3, 13.1.4, 13.1.5, 14.1.0 (+13)
F5 BIG-IP (LTM): 13.1.0, 13.1.1, 13.1.3, 13.1.4, 13.1.5, 14.1.0 (+13)
F5 Networks, Inc. BIG-IP (PEM): 13.1.0, 13.1.1, 13.1.3, 13.1.4, 13.1.5, 14.1.0 (+13)

References

Get alerted when CVE-2022-28705 or the next vulnerability affects your stack