vulnerability

F5 Networks: CVE-2022-27189: K16187341: BIG-IP ICAP profile vulnerability CVE-2022-27189

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:P)

Published

May 4, 2022

Added

May 5, 2022

Modified

Mar 26, 2026

Description

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when an Internet Content Adaptation Protocol (ICAP) profile is configured on a virtual server, undisclosed traffic can cause an increase in Traffic Management Microkernel (TMM) memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Solution

f5-big-ip-upgrade-latest

References

CVE-2022-27189
https://attackerkb.com/topics/CVE-2022-27189
CWE-681
https://my.f5.com/manage/s/article/K16187341

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report