Wiz
Vulnerability DatabaseCVE-2022-23022

CVE-2022-23022: 
F5 BIG-IP Advanced Firewall Manager vulnerability analysis and mitigation

Overview

CVE-2022-23022 affects BIG-IP version 16.1.x before 16.1.2. The vulnerability was disclosed on January 25, 2022, and involves a condition where undisclosed requests to a virtual server with an HTTP profile configured can cause the Traffic Management Microkernel (TMM) to terminate (AttackerKB).

Technical details

The vulnerability has been assigned a CVSS v3.1 Base Score of 7.5 (High). The attack vector is Network-based, with low attack complexity, requires no privileges or user interaction, and has an unchanged scope. While the vulnerability does not impact confidentiality or integrity, it has a high impact on availability (AttackerKB). The vulnerability is classified as CWE-476 (NVD Report).

Impact

The primary impact of this vulnerability is on system availability. When successfully exploited, it can cause the Traffic Management Microkernel (TMM) to terminate, resulting in a denial of service condition (AttackerKB).

Mitigation and workarounds

The recommended mitigation is to upgrade affected BIG-IP systems to version 16.1.2 or later. The vulnerability affects BIG-IP version 16.1.x before 16.1.2 (AttackerKB).

Additional resources

Source: This report was generated using AI

Related F5 BIG-IP Advanced Firewall Manager vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-41433HIGH8.7
  • F5 BIG-IP Advanced Firewall ManagerF5 BIG-IP Advanced Firewall Manager
  • cpe:2.3:a:f5:big-ip_access_policy_manager
NoYesMay 07, 2025
CVE-2025-41431HIGH8.7
  • F5 BIG-IP Advanced Firewall ManagerF5 BIG-IP Advanced Firewall Manager
  • cpe:2.3:a:f5:big-ip_access_policy_manager
NoYesMay 07, 2025
CVE-2025-41414HIGH8.7
  • F5 BIG-IP Advanced Firewall ManagerF5 BIG-IP Advanced Firewall Manager
  • cpe:2.3:a:f5:big-ip_access_policy_manager
NoYesMay 07, 2025
CVE-2025-41399HIGH8.7
  • F5 BIG-IP Advanced Firewall ManagerF5 BIG-IP Advanced Firewall Manager
  • cpe:2.3:a:f5:big-ip_domain_name_system
NoYesMay 07, 2025
CVE-2025-54500MEDIUM6.9
  • F5 BIG-IP Advanced Firewall ManagerF5 BIG-IP Advanced Firewall Manager
  • cpe:2.3:a:f5:big-ip_local_traffic_manager
NoYesAug 13, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Additional Wiz resources

Cloud Vulnerability DB

Cloud Vulnerability DB

A community-led vulnerabilities database

Cloud Threat Landscape

Cloud Threat Landscape

A threat intelligence database

PEACH

PEACH

A tenant isolation framework

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management
Get a demo