CVE-2025-47150
Full vulnerability record from the local CVENow database.
Description
When SNMP is configured on F5OS Appliance and Chassis systems, undisclosed requests can cause an increase in SNMP memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Severity
HIGH
CVSS score
7.1
(v4.0)
Vulnerability status
Analyzed
Source identifier
Published
2025-10-15 14:15:47.823000
Last modified
2026-10-18 21:10:00.120000
View original CVE JSON
{
"id": "CVE-2025-47150",
"sourceIdentifier": "[email protected]",
"published": "2025-10-15T14:15:47.823",
"lastModified": "2026-10-18T21:10:00.120",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "When SNMP is configured on F5OS Appliance and Chassis systems, undisclosed requests can cause an increase in SNMP memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
},
{
"lang": "es",
"value": "Cuando SNMP está configurado en sistemas F5OS Appliance y Chassis, solicitudes no reveladas pueden causar un aumento en la utilización de recursos de memoria SNMP. Nota: Las versiones de software que han alcanzado el Fin del Soporte Técnico (EoTS) no se evalúan."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "F5",
"product": "F5OS - Appliance",
"defaultStatus": "unknown",
"versions": [
{
"version": "1.8.0",
"lessThan": "1.8.3",
"versionType": "custom",
"status": "affected"
},
{
"version": "1.5.0",
"lessThan": "1.5.3",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "F5",
"product": "F5OS - Chassis",
"defaultStatus": "unknown",
"versions": [
{
"version": "1.8.0",
"lessThan": "*",
"versionType": "custom",
"status": "unaffected"
},
{
"version": "1.6.0",
"lessThan": "1.6.4",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-10-16T03:56:53.093877Z",
"id": "CVE-2025-47150",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:f5:f5os-a:*:*:*:*:*:*:*:*",
"versionStartIncluding": "1.5.1",
"versionEndExcluding": "1.5.3",
"matchCriteriaId": "4899125F-A896-487F-A2AC-803FFCF0C4FF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:f5:f5os-a:*:*:*:*:*:*:*:*",
"versionStartIncluding": "1.8.0",
"versionEndExcluding": "1.8.3",
"matchCriteriaId": "7A7C1C35-ECFA-4E9B-8B84-4D08E1501AAF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:f5:f5os-c:*:*:*:*:*:*:*:*",
"versionStartIncluding": "1.6.0",
"versionEndExcluding": "1.6.4",
"matchCriteriaId": "4C6DB709-3388-4DDF-A5A7-02C2D34D0104"
}
]
}
]
}
],
"references": [
{
"url": "https://my.f5.com/manage/s/article/K000149820",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}