What’s Vulnerable › Vulnerabilities

CVE-2022-41836: BIG-IP Advanced WAF and ASM bd vulnerability CVE-2022-41836

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-10-19 · updated 2026-06-17
• Weakness: CWE-20

Description

When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.

Affected products

• F5 Big-Ip Advanced Web Application Firewall: from 15.1.0 before 15.1.7; from 16.1.0 before 16.1.3.1; 17.0.0 — fixed in 15.1.7, 16.1.3.1
• BIG-IP ASM: from 15.1.0 before 15.1.7; from 16.1.0 before 16.1.3.1; 17.0.0 — fixed in 15.1.7, 16.1.3.1

How to fix

Upgrade to a fixed version: F5 Big-Ip Advanced Web Application Firewall 15.1.7, 16.1.3.1; BIG-IP ASM 15.1.7, 16.1.3.1. Check the vendor advisory for mitigations.

References

• https://support.f5.com/csp/article/K47204506
• https://support.f5.com/csp/article/K47204506

Get alerted when CVE-2022-41836 or the next vulnerability affects your stack