CVE-2025-53856

CVSS 8.7v4.0pub. 2025-10-15upd. 2025-10-21

When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object uses the embedded Packet Velocity Acceleration (ePVA) feature, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. To determine which BIG-IP platforms have an ePVA chip refer to K12837: Overview of the ePVA feature https://my.f5.com/manage/s/article/K12837 . Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVSS Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

F5 Big Ip Access Policy Manager
APP
F5
15.1.0 – 15.1.10.8 (excl.)17.1.0 – 17.1.3 (excl.)17.5.0 – 17.5.116.1.0 – 16.1.6.1 (excl.)
F5 Big Ip Advanced Firewall Manager
APP
F5
17.1.0 – 17.1.3 (excl.)16.1.0 – 16.1.6.1 (excl.)15.1.0 – 15.1.10.8 (excl.)17.5.0 – 17.5.1
F5 Big Ip Advanced Web Application Firewall
APP
F5
17.5.0 – 17.5.116.1.0 – 16.1.6.1 (excl.)17.1.0 – 17.1.3 (excl.)15.1.0 – 15.1.10.8 (excl.)
F5 Big Ip Analytics
APP
F5
16.1.0 – 16.1.6.1 (excl.)17.1.0 – 17.1.3 (excl.)17.5.0 – 17.5.115.1.0 – 15.1.10.8 (excl.)
F5 Big Ip Application Acceleration Manager
APP
F5
15.1.0 – 15.1.10.8 (excl.)17.5.0 – 17.5.116.1.0 – 16.1.6.1 (excl.)17.1.0 – 17.1.3 (excl.)
F5 Big Ip Application Security Manager
APP
F5
17.1.0 – 17.1.3 (excl.)16.1.0 – 16.1.6.1 (excl.)15.1.0 – 15.1.10.8 (excl.)17.5.0 – 17.5.1
F5 Big Ip Application Visibility And Reporting
APP
F5
16.1.0 – 16.1.6.1 (excl.)15.1.0 – 15.1.10.8 (excl.)17.5.0 – 17.5.117.1.0 – 17.1.3 (excl.)
F5 Big Ip Automation Toolchain
APP
F5
15.1.0 – 15.1.10.8 (excl.)17.5.0 – 17.5.117.1.0 – 17.1.3 (excl.)16.1.0 – 16.1.6.1 (excl.)
F5 Big Ip Carrier Grade Nat
APP
F5
16.1.0 – 16.1.6.1 (excl.)17.1.0 – 17.1.3 (excl.)17.5.0 – 17.5.115.1.0 – 15.1.10.8 (excl.)
F5 Big Ip Container Ingress Services
APP
F5
17.1.0 – 17.1.3 (excl.)16.1.0 – 16.1.6.1 (excl.)17.5.0 – 17.5.115.1.0 – 15.1.10.8 (excl.)
F5 Big Ip Ddos Hybrid Defender
APP
F5
15.1.0 – 15.1.10.8 (excl.)16.1.0 – 16.1.6.1 (excl.)17.1.0 – 17.1.3 (excl.)17.5.0 – 17.5.1
F5 Big Ip Domain Name System
APP
F5
16.1.0 – 16.1.6.1 (excl.)17.1.0 – 17.1.3 (excl.)17.5.0 – 17.5.115.1.0 – 15.1.10.8 (excl.)
F5 Big Ip Edge Gateway
APP
F5
17.1.0 – 17.1.3 (excl.)16.1.0 – 16.1.6.1 (excl.)15.1.0 – 15.1.10.8 (excl.)17.5.0 – 17.5.1
F5 Big Ip Fraud Protection Service
APP
F5
16.1.0 – 16.1.6.1 (excl.)17.5.0 – 17.5.117.1.0 – 17.1.3 (excl.)15.1.0 – 15.1.10.8 (excl.)
F5 Big Ip Global Traffic Manager
APP
F5
16.1.0 – 16.1.6.1 (excl.)17.1.0 – 17.1.3 (excl.)15.1.0 – 15.1.10.8 (excl.)
F5 Big Ip Link Controller
APP
F5
15.1.0 – 15.1.10.8 (excl.)17.5.0 – 17.5.117.1.0 – 17.1.3 (excl.)16.1.0 – 16.1.6.1 (excl.)
F5 Big Ip Local Traffic Manager
APP
F5
17.5.0 – 17.5.116.1.0 – 16.1.6.1 (excl.)15.1.0 – 15.1.10.8 (excl.)17.1.0 – 17.1.3 (excl.)
F5 Big Ip Policy Enforcement Manager
APP
F5
15.1.0 – 15.1.10.8 (excl.)17.5.0 – 17.5.117.1.0 – 17.1.3 (excl.)16.1.0 – 16.1.6.1 (excl.)
F5 Big Ip Ssl Orchestrator
APP
F5
17.1.0 – 17.1.3 (excl.)15.1.0 – 15.1.10.8 (excl.)16.1.0 – 16.1.6.1 (excl.)17.5.0 – 17.5.1
F5 Big Ip Webaccelerator
APP
F5
16.1.0 – 16.1.6.1 (excl.)15.1.0 – 15.1.10.8 (excl.)17.1.0 – 17.1.3 (excl.)17.5.0 – 17.5.1
F5 Big Ip Websafe
APP
F5
16.1.0 – 16.1.6.1 (excl.)15.1.0 – 15.1.10.8 (excl.)17.5.0 – 17.5.117.1.0 – 17.1.3 (excl.)