CVE-2015-7759 describes a denial-of-service vulnerability affecting various F5 BIG-IP products, including LTM, APM, and ASM, specifically versions 12.0.0 before HF1. The flaw occurs when a virtual server's TCP profile has "Congestion Metrics Cache" enabled, allowing remote attackers to trigger a Traffic Management Microkernel (TMM) restart via crafted ICMP packets related to Path MTU discovery. This vulnerability has a low CVSS score of 3.7, indicating a low severity. It can be exploited remotely with high attack complexity, but only results in a denial of service, meaning no confidentiality, integrity, or availability of data is compromised beyond the TMM restart. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Furthermore, the CVE has received minimal community discussion or media coverage, suggesting a low level of awareness and exploitation interest.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
12.0.0CPE matchmatch criteria | cpe:2.3:a:f5:big-ip_analytics:12.0.0:*:*:*:*:*:*:* | ||
12.0.0CPE matchmatch criteria | cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:* | ||
12.0.0CPE matchmatch criteria | cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:* | ||
12.0.0CPE matchmatch criteria | cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:* | ||
12.0.0CPE matchmatch criteria | cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.3 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.