NetSight
IP …
high7.5

CVE-2025-53856

When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object uses the embedded Packet Velocity Accelera…

Impact

When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object uses the embedded Packet Velocity Acceleration (ePVA) feature, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  To determine which BIG-IP platforms have an ePVA chip refer to K12837: Overview of the ePVA feature https://my.f5.com/manage/s/article/K12837 .  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffected versions
F5Big-Ip Access Policy Manager
from 15.1.0 before 15.1.10.8
from 16.1.0 before 16.1.6.1
from 17.1.0 before 17.1.3
from 17.5.0 through 17.5.1
F5Big-Ip Advanced Firewall Manager
from 15.1.0 before 15.1.10.8
from 16.1.0 before 16.1.6.1
from 17.1.0 before 17.1.3
from 17.5.0 through 17.5.1
F5Big-Ip Advanced Web Application Firewall
from 15.1.0 before 15.1.10.8
from 16.1.0 before 16.1.6.1
from 17.1.0 before 17.1.3
from 17.5.0 through 17.5.1
F5Big-Ip Analytics
from 15.1.0 before 15.1.10.8
from 16.1.0 before 16.1.6.1
from 17.1.0 before 17.1.3
from 17.5.0 through 17.5.1
F5Big-Ip Application Acceleration Manager
from 15.1.0 before 15.1.10.8
from 16.1.0 before 16.1.6.1
from 17.1.0 before 17.1.3
from 17.5.0 through 17.5.1
F5Big-Ip Application Security Manager
from 15.1.0 before 15.1.10.8
from 16.1.0 before 16.1.6.1
from 17.1.0 before 17.1.3
from 17.5.0 through 17.5.1
F5Big-Ip Application Visibility And Reporting
from 15.1.0 before 15.1.10.8
from 16.1.0 before 16.1.6.1
from 17.1.0 before 17.1.3
from 17.5.0 through 17.5.1
F5Big-Ip Automation Toolchain
from 15.1.0 before 15.1.10.8
from 16.1.0 before 16.1.6.1
from 17.1.0 before 17.1.3
from 17.5.0 through 17.5.1
F5Big-Ip Carrier-Grade Nat
from 15.1.0 before 15.1.10.8
from 16.1.0 before 16.1.6.1
from 17.1.0 before 17.1.3
from 17.5.0 through 17.5.1
F5Big-Ip Container Ingress Services
from 15.1.0 before 15.1.10.8
from 16.1.0 before 16.1.6.1
from 17.1.0 before 17.1.3
from 17.5.0 through 17.5.1
F5Big-Ip Ddos Hybrid Defender
from 15.1.0 before 15.1.10.8
from 16.1.0 before 16.1.6.1
from 17.1.0 before 17.1.3
from 17.5.0 through 17.5.1
F5Big-Ip Domain Name System
from 15.1.0 before 15.1.10.8
from 16.1.0 before 16.1.6.1
from 17.1.0 before 17.1.3
from 17.5.0 through 17.5.1

Weakness classification

CWE-705

References