CVE-2025-47150

F5OS SNMP vulnerability

State
Published
Severity
7.1 High
Published
Oct 15, 2025
Updated
Feb 26, 2026
Reserved
Oct 3, 2025

Read the record on cve.org

Description

When SNMP is configured on F5OS Appliance and Chassis systems, undisclosed requests can cause an increase in SNMP memory resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Scores

CVSSScoreVectorSource
4.07.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:Nf5
3.16.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hf5

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
F5OS - ApplianceF5
  • 1.8.0 to before 1.8.3Affected
  • 1.5.0 to before 1.5.3Affected
F5OS - ChassisF5
  • 1.8.0 and laterNot affected
  • 1.6.0 to before 1.6.4Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.