Elliptic Curve Cryptography Vulnerability in F5 Networks Product

CVE-2025-60016

What is CVE-2025-60016?

A vulnerability exists in F5 Networks' products when using Diffie-Hellman group Elliptic Curve Cryptography with Brainpool curves in SSL profiles. When this configuration is applied to a virtual server, it may inadvertently trigger the Traffic Management Microkernel to terminate, resulting in service disruption. This vulnerability highlights the potential risks associated with improperly configured cryptographic algorithms in critical network management components.

References