CVE-2022-35240: 
F5 BIG-IP Advanced Firewall Manager vulnerability analysis and mitigation

A vulnerability identified as CVE-2022-35240 affects BIG-IP versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5. The issue occurs when the Message Routing (MR) Message Queuing Telemetry Transport (MQTT) profile is configured on a virtual server, where undisclosed requests can lead to increased memory resource utilization (CVE Details).

The vulnerability is related to the Message Routing (MR) Message Queuing Telemetry Transport (MQTT) profile configuration in BIG-IP systems. When this profile is configured on a virtual server, it becomes susceptible to memory resource consumption issues through specific undisclosed requests (CVE Details).

The primary impact of this vulnerability is the potential for increased memory resource utilization in affected systems, which could lead to degraded performance or service availability (CVE Details).

F5 has released patched versions to address this vulnerability. Users should upgrade to versions 16.1.2.2, 15.1.6.1, or 14.1.5 or later, depending on their current version track. Systems that have reached End of Technical Support (EoTS) are not evaluated (CVE Details).