CVE-2022-32455 : What You Need to Know

This article provides details about CVE-2022-32455, a vulnerability found in F5's BIG-IP software.

Understanding CVE-2022-32455

CVE-2022-32455 is a TMM (Traffic Management Microkernel) vulnerability affecting various versions of BIG-IP software.

What is CVE-2022-32455?

In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, undisclosed requests when using a BIG-IP LTM Client SSL profile for client certificate authentication can cause the TMM to terminate.

The Impact of CVE-2022-32455

This vulnerability has a CVSS base score of 7.5 (High), with a HIGH availability impact. It could be exploited over the network with low attack complexity.

Technical Details of CVE-2022-32455

Vulnerability Description

The vulnerability involves unauthenticated requests triggering the termination of the Traffic Management Microkernel (TMM) in affected BIG-IP versions.

Affected Systems and Versions

BIG-IP 13.1.0 (affected)
BIG-IP 14.1.0 to 14.1.5 (affected)
BIG-IP 15.1.0 to 15.1.6.1 (affected)
BIG-IP 16.1.0 to 16.1.2.2 (affected)
BIG-IP 17.0.0 (unaffected)

Exploitation Mechanism

The vulnerability can be exploited through undisclosed requests utilizing the BIG-IP LTM Client SSL profile.

Mitigation and Prevention

Immediate Steps to Take

Update BIG-IP software to versions that address this vulnerability.
Apply relevant security patches released by F5.

Long-Term Security Practices

Regularly monitor security advisories from F5.
Implement network security measures to mitigate potential attacks.

Patching and Updates

Ensure timely installation of software updates provided by F5 to patch the CVE-2022-32455 vulnerability.