« Volver al listado

CVE-2022-41836

Estado: ModificadaAlta (7.5)—

When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

F5 — Big-ip Advanced WEB Application FirewallF5 — Big-ip Application Security Manager

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-41836",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2022-41836",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-05-07T20:51:44.103875Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "f5sirt@f5.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "f5sirt@f5.com",
      "affectedData": [
        {
          "vendor": "F5",
          "product": "BIG-IP Advanced WAF & ASM",
          "versions": [
            {
              "status": "affected",
              "version": "17.0.x",
              "lessThan": "17.0.0.1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "16.1.x",
              "lessThan": "16.1.3.1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "15.1.x",
              "lessThan": "15.1.7",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "14.1.0",
              "lessThan": "14.1.x*",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "13.1.0",
              "lessThan": "13.1.x*",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-10-19T22:15:13.550",
  "references": [
    {
      "url": "https://support.f5.com/csp/article/K47204506",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "source": "f5sirt@f5.com"
    },
    {
      "url": "https://support.f5.com/csp/article/K47204506",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "f5sirt@f5.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate."
    },
    {
      "lang": "es",
      "value": "Cuando es configurada una política de seguridad habilitada para el \"Attack Signature False Positive Mode\" en un servidor virtual, las peticiones no reveladas pueden causar la finalización del proceso bd"
    }
  ],
  "lastModified": "2026-06-17T05:03:53.780",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8B48B9A2-0402-461C-A3BC-2A54D3EBD51F",
              "versionEndExcluding": "15.1.7",
              "versionStartIncluding": "15.1.0"
            },
            {
              "criteria": "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A1256CDF-2016-468E-B44B-5D2E7F487361",
              "versionEndExcluding": "16.1.3.1",
              "versionStartIncluding": "16.1.0"
            },
            {
              "criteria": "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:17.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A93FAFBD-B361-44AD-9EE5-EE595CAE9EDC"
            },
            {
              "criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DAE8E3A1-0E66-4A4C-BA58-E22AEA8705F7",
              "versionEndExcluding": "15.1.7",
              "versionStartIncluding": "15.1.0"
            },
            {
              "criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "179FECCD-2795-4194-BED0-18CFEF792E9F",
              "versionEndExcluding": "16.1.3.1",
              "versionStartIncluding": "16.1.0"
            },
            {
              "criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:17.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E9AB53DF-7335-462E-B8CD-44DF0DCE3826"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "f5sirt@f5.com"
}