DDoS Vulnerability in Traffic Management Microkernel by F5 Networks
CVE-2025-61951

8.7HIGH

Key Information:

Vendor

F5
Status
Big-ip
Vendor
CVE Published:
15 October 2025

What is CVE-2025-61951?

Undisclosed traffic can lead to an unexpected termination of the Traffic Management Microkernel (TMM) in F5's products. This vulnerability arises specifically when a DTLS 1.2 virtual server is configured with a Server SSL profile that utilizes a certificate and key, while the SSL Sign Hash is set to ANY. Furthermore, the backend server must have DTLS 1.2 with client authentication enabled. Organizations should be aware of this issue as it can impact service availability and security.

Affected Version(s)

BIG-IP 17.5.0 < 17.5.1

BIG-IP 17.1.0 < 17.1.3

BIG-IP 16.1.0 < 16.1.6.1

References

https://my.f5.com/manage/s/article/K000151309
vendor-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

F5
JSON
.
CVE-2025-61951 : DDoS Vulnerability in Traffic Management Microkernel by F5 Networks