CVE-2022-41770
F5 BIG-IP Advanced Firewall Manager vulnerability analysis and mitigation

Overview

A vulnerability identified as CVE-2022-41770 affects F5's BIG-IP and BIG-IQ systems. The vulnerability was discovered and assigned on September 30, 2022. It impacts multiple versions of BIG-IP (17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all versions of 13.1.x) and BIG-IQ (all versions of 8.x and 7.x) systems. The issue allows an authenticated iControl REST user to cause increased memory resource utilization through undisclosed requests (CVE Mitre).

Technical details

The vulnerability is classified under CWE-400 (Common Weakness Enumeration) which typically relates to uncontrolled resource consumption (NVD CNA). The vulnerability specifically involves the iControl REST interface and can lead to memory resource consumption issues when exploited by an authenticated user.

Impact

When successfully exploited, this vulnerability can lead to increased memory resource utilization in the affected systems, potentially impacting system performance and availability (CVE Mitre).

Mitigation and workarounds

F5 has released fixes for this vulnerability. Users should upgrade to the following versions: BIG-IP 17.0.0.1, 16.1.3.1, 15.1.7, or 14.1.5.1. Users of BIG-IP 13.1.x and BIG-IQ 8.x and 7.x should contact F5 support for guidance (CVE Mitre).

Additional resources


SourceThis report was generated using AI

Related F5 BIG-IP Advanced Firewall Manager vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-41433HIGH8.7
  • F5 BIG-IP Advanced Firewall ManagerF5 BIG-IP Advanced Firewall Manager
  • cpe:2.3:a:f5:big-ip_access_policy_manager
NoYesMay 07, 2025
CVE-2025-41431HIGH8.7
  • F5 BIG-IP Advanced Firewall ManagerF5 BIG-IP Advanced Firewall Manager
  • cpe:2.3:a:f5:big-ip_local_traffic_manager
NoYesMay 07, 2025
CVE-2025-41414HIGH8.7
  • F5 BIG-IP Advanced Firewall ManagerF5 BIG-IP Advanced Firewall Manager
  • cpe:2.3:a:f5:big-ip_access_policy_manager
NoYesMay 07, 2025
CVE-2025-41399HIGH8.7
  • F5 BIG-IP Advanced Firewall ManagerF5 BIG-IP Advanced Firewall Manager
  • cpe:2.3:a:f5:big-ip_local_traffic_manager
NoYesMay 07, 2025
CVE-2025-54500MEDIUM6.9
  • F5 BIG-IP Advanced Firewall ManagerF5 BIG-IP Advanced Firewall Manager
  • cpe:2.3:a:f5:big-ip_access_policy_manager
NoYesAug 13, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management