High severity · published Feb 5, 2025
CVE-2025-22891
BIG-IP PEM Vulnerability
7.5
CVSS
0.4%
EPSS
No
On KEV
Description
When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed traffic can cause the Virtual Server to stop processing new client connections and an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BI
BIG-IP · F5
17.1.0 before 17.1.2; 16.1.0 before 16.1.5; 15.1.0 · source: vendor
BP
Big-ip Policy Enforcement Manager · F5
15.1.0 before 15.1.10.6.0.11.6; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-22891
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-22891
Vendor Advisory
https://my.f5.com/manage/s/article/K000139778
More from BIG-IP
9.8
CVE-2026-94127
BIG-IP APM OAuth vulnerability
9.8
CVE-2025-53521
BigIP APM Vulnerability
9.8
CVE-2023-46747
BIG-IP Configuration utility unauthenticated remote code execution vulnerability
9.8
CVE-2022-1388
F5 BIG-IP Missing Authentication Vulnerability
9.8
CVE-2021-22991
F5 BIG-IP Traffic Management Microkernel Buffer Overflow