Impact
An undirected traffic pattern can lead F5 BIG‑IP's Traffic Management Microkernel to ignore BFD packets. When BFD stops being processed, the associated routing protocol can fail over, disrupting connectivity. The flaw, classified as CWE‑410, affects the handling of BFD traffic which can result in a denial of service to BFD‑enabled sessions.
Affected Systems
Vendor F5 listed product BIG‑IP is impacted. The vulnerability is linked to the BFD implementation in both static and dynamic routing protocols built into all supported BIG‑IP releases before the end of technical support. No precise version numbers were supplied in the advisory.
Risk and Exploitability
With a CVSS score of 6.3 the weakness is moderate. EPSS is not reported, but there is no evidence of exploitation in the KEV catalog. The vulnerability requires the attacker to send traffic that triggers the TMM to stop processing BFD packets. The likely attack vector is a network‑level actor who can inject custom traffic toward the device or an internal host with BFD access, though the data does not explicitly state the vector.
OpenCVE Enrichment