1. Home
  2. CVE Database
  3. CVE-2025-22891
HIGH · 7.5

CVE-2025-22891

When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed traffic can cause the Virtual Server to stop processing new client connections and an in...

Vulnerability Description

When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed traffic can cause the Virtual Server to stop processing new client connections and an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
F5Big-Ip Policy Enforcement Manager>= 15.1.0, < 15.1.10.6.0.11.6

Related Weaknesses (CWE)

CWE-772

References

FAQ

What is CVE-2025-22891?

CVE-2025-22891 is a vulnerability with a CVSS score of 7.5 (HIGH). When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed traffic can cause the Virtual Server to stop processing new client connections and an in...

How severe is CVE-2025-22891?

CVE-2025-22891 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-22891?

Check the references section above for vendor advisories and patch information. Affected products include: F5 Big-Ip Policy Enforcement Manager.