Wiz Agents & Workflows are here
Wiz
Vulnerability DatabaseCVE-2024-41727

CVE-2024-41727: 
F5 BIG-IP Advanced Firewall Manager vulnerability analysis and mitigation

Overview

In BIG-IP tenants running on r2000 and r4000 series hardware, or BIG-IP Virtual Edition (VEs) using Intel E810 SR-IOV NIC, undisclosed traffic can cause an increase in memory resource utilization. The vulnerability, identified as CVE-2024-41727, affects BIG-IP (all modules) versions 16.1.0 through 16.1.4 and 15.1.0 through 15.1.10. This vulnerability has been assigned a CVSS v4.0 score of 8.7 (HIGH) and a CVSS v3.1 score of 7.5 (HIGH) (CERT-EU, NVD).

Technical details

The vulnerability allows a remote, unauthenticated attacker to degrade system performance by impacting the Traffic Management Microkernel (TMM) process. The vulnerability is classified under CWE-770 (Allocation of Resources Without Limits or Throttling) and CWE-400 (Uncontrolled Resource Consumption). The CVSS v4.0 vector string is CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L, indicating network accessibility, low attack complexity, and no required privileges or user interaction (CERT-EU, NVD).

Impact

If the TMM process is not restarted, the degradation can result in a denial-of-service (DoS) on the BIG-IP system. The vulnerability affects only the data plane, with no exposure of the control plane (CERT-EU).

Mitigation and workarounds

It is recommended to apply updates to the affected assets as soon as possible. Software versions which have reached End of Technical Support (EoTS) are not evaluated (CERT-EU).

Additional resources

Source: This report was generated using AI

Related F5 BIG-IP Advanced Firewall Manager vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-41433HIGH8.7
  • F5 BIG-IP Advanced Firewall ManagerF5 BIG-IP Advanced Firewall Manager
  • cpe:2.3:a:f5:big-ip_local_traffic_manager
NoYesMay 07, 2025
CVE-2025-41431HIGH8.7
  • F5 BIG-IP Advanced Firewall ManagerF5 BIG-IP Advanced Firewall Manager
  • cpe:2.3:a:f5:big-ip_access_policy_manager
NoYesMay 07, 2025
CVE-2025-41414HIGH8.7
  • F5 BIG-IP Advanced Firewall ManagerF5 BIG-IP Advanced Firewall Manager
  • cpe:2.3:a:f5:big-ip_application_security_manager
NoYesMay 07, 2025
CVE-2025-41399HIGH8.7
  • F5 BIG-IP Advanced Firewall ManagerF5 BIG-IP Advanced Firewall Manager
  • cpe:2.3:a:f5:big-ip_local_traffic_manager
NoYesMay 07, 2025
CVE-2025-54500MEDIUM6.9
  • F5 BIG-IP Advanced Firewall ManagerF5 BIG-IP Advanced Firewall Manager
  • cpe:2.3:a:f5:big-ip_access_policy_manager
NoYesAug 13, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Additional Wiz resources

Cloud Vulnerability DB

Cloud Vulnerability DB

A community-led vulnerabilities database

Cloud Threat Landscape

Cloud Threat Landscape

A threat intelligence database

PEACH

PEACH

A tenant isolation framework

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management
Get a demo