Description
When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object uses the embedded Packet Velocity Acceleration (ePVA) feature, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. To determine which BIG-IP platforms have an ePVA chip refer to K12837: Overview of the ePVA feature https://my.f5.com/manage/s/article/K12837 . Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Metrics
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Attack Vector
- network
- Complexity
- low
- Privileges
- none
- User Action
- none
- Confidentiality
- undefined
- Integrity
- undefined
- Availability
- undefined
- Weaknesses
- CWE-705NVD-CWE-noinfo
Metadata
- Primary Vendor
- F5
- Published
- 10/15/2025
- Last Modified
- 10/21/2025
- Source
- NIST NVD
- Note: Verify all details with official vendor sources before applying patches.
Affected Products
f5 : big-ip_access_policy_managerf5 : big-ip_advanced_firewall_managerf5 : big-ip_advanced_web_application_firewallf5 : big-ip_analyticsf5 : big-ip_application_acceleration_managerf5 : big-ip_application_security_managerf5 : big-ip_application_visibility_and_reportingf5 : big-ip_automation_toolchainf5 : big-ip_carrier-grade_natf5 : big-ip_container_ingress_servicesf5 : big-ip_ddos_hybrid_defenderf5 : big-ip_domain_name_systemf5 : big-ip_edge_gatewayf5 : big-ip_fraud_protection_servicef5 : big-ip_global_traffic_managerf5 : big-ip_link_controllerf5 : big-ip_local_traffic_managerf5 : big-ip_policy_enforcement_managerf5 : big-ip_ssl_orchestratorf5 : big-ip_webacceleratorf5 : big-ip_websafef5 : big-ip_access_policy_managerf5 : big-ip_advanced_firewall_managerf5 : big-ip_advanced_web_application_firewallf5 : big-ip_analyticsf5 : big-ip_application_acceleration_managerf5 : big-ip_application_security_managerf5 : big-ip_application_visibility_and_reportingf5 : big-ip_automation_toolchainf5 : big-ip_carrier-grade_natf5 : big-ip_container_ingress_servicesf5 : big-ip_ddos_hybrid_defenderf5 : big-ip_domain_name_systemf5 : big-ip_edge_gatewayf5 : big-ip_fraud_protection_servicef5 : big-ip_global_traffic_managerf5 : big-ip_link_controllerf5 : big-ip_local_traffic_managerf5 : big-ip_policy_enforcement_managerf5 : big-ip_ssl_orchestratorf5 : big-ip_webacceleratorf5 : big-ip_websafef5 : big-ip_access_policy_managerf5 : big-ip_access_policy_managerf5 : big-ip_advanced_firewall_managerf5 : big-ip_advanced_firewall_managerf5 : big-ip_advanced_web_application_firewallf5 : big-ip_advanced_web_application_firewallf5 : big-ip_analyticsf5 : big-ip_analyticsf5 : big-ip_application_acceleration_managerf5 : big-ip_application_acceleration_managerf5 : big-ip_application_security_managerf5 : big-ip_application_security_managerf5 : big-ip_application_visibility_and_reportingf5 : big-ip_application_visibility_and_reportingf5 : big-ip_automation_toolchainf5 : big-ip_automation_toolchainf5 : big-ip_carrier-grade_natf5 : big-ip_carrier-grade_natf5 : big-ip_container_ingress_servicesf5 : big-ip_container_ingress_servicesf5 : big-ip_ddos_hybrid_defenderf5 : big-ip_ddos_hybrid_defenderf5 : big-ip_domain_name_systemf5 : big-ip_domain_name_systemf5 : big-ip_edge_gatewayf5 : big-ip_edge_gatewayf5 : big-ip_fraud_protection_servicef5 : big-ip_fraud_protection_servicef5 : big-ip_global_traffic_managerf5 : big-ip_link_controllerf5 : big-ip_link_controllerf5 : big-ip_local_traffic_managerf5 : big-ip_local_traffic_managerf5 : big-ip_policy_enforcement_managerf5 : big-ip_policy_enforcement_managerf5 : big-ip_ssl_orchestratorf5 : big-ip_ssl_orchestratorf5 : big-ip_webacceleratorf5 : big-ip_webacceleratorf5 : big-ip_websafef5 : big-ip_websafe
AI-Powered Remediation
Generate remediation guidance or a C-suite brief for this vulnerability.