CVE-2022-26130
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Summary
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when an Active mode-enabled FTP profile is configured on a virtual server, undisclosed traffic can cause the virtual server to stop processing active FTP data channel connections. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| F5 | BIG-IP | 12.1.x | unaffected |
| F5 | BIG-IP | 11.6.x | unaffected |
| F5 | BIG-IP | 17.0.0 < 17.0.x* | unaffected |
| F5 | BIG-IP | 16.1.x < 16.1.2.2 | affected |
| F5 | BIG-IP | 15.1.x < 15.1.5.1 | affected |
| F5 | BIG-IP | 14.1.x < 14.1.4.6 | affected |
| F5 | BIG-IP | 13.1.x < 13.1.5 | affected |
Weaknesses
- CWE-754: CWE-754 Improper Check for Unusual or Exceptional Conditions
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.