BC
Product
Big-ip Carrier-grade Nat
On CISA KEVExploited in the wildRansomware-linked
109
CVEs
3
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 3High 65Medium 39Low 2
Watch
Add Big-ip Carrier-grade Nat to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-21087 | 7.5 | Feb 5 | TMM Vulnerability Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2 |
| CVE-2024-41727 | 7.5 | Aug 14 | BIG-IP TMM vulnerability Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0 |
| CVE-2024-41164 | 7.5 | Aug 14 | BIG-IP MPTCP vulnerability Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0 |
| CVE-2024-39778 | 7.5 | Aug 14 | BIG-IP HSB vulnerability Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0 |
| CVE-2024-25560 | 7.5 | May 8 | TMM Vulnerability Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.4; 17.1.0 |
| CVE-2024-33608 | 7.5 | May 8 | BIG-IP IPsec vulnerability Affected: 17.1.0 |
| CVE-2023-41085 | 7.5 | Oct 10 | BIG-IP IPSEC vulnerability Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4 |
| CVE-2023-40542 | 7.5 | Oct 10 | BIG-IP TCP Profile vulnerability Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4 |
| CVE-2023-40534 | 7.5 | Oct 10 | BIG-IP HTTP/2 vulnerability Affected: 16.1.0 before 16.1.4.1; 17.1.0 |
| CVE-2023-29163 | 7.5 | May 3 | BIG-IP UDP Profile vulnerability Affected: 14.1.0 before 14.1.5.4; 15.1.0 before 15.1.8.2; 16.1.0 before 16.1.3.4; 17.0.0 |
| CVE-2002-20001 | 7.5 | Nov 11 | The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive… Affected: 13.1.0 through 17.1.2; 17.5.0 |
| CVE-2020-27720 | 7.5 | Dec 24 | On BIG-IP LTM/CGNAT version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5, when processing NAT66 traffic with Port Block Allocation (PBA) mode and SP-DAG… Affected: 13.1.0 through 13.1.3; 14.1.0 before 14.1.3.1; 15.1.0 before 15.1.1; 16.0.0 before 16.0.1 |
| CVE-2026-39459 | 7.2 | May 13 | iControl REST and tmsh vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0 |
| CVE-2024-45844 | 7.2 | Oct 16 | BIG-IP monitors vulnerability Affected: 15.1.0 before 15.1.10.5; 16.1.0 before 16.1.5; 17.1.0 before 17.1.1.4 |
| CVE-2023-42768 | 7.2 | Oct 10 | BIG-IP iControl REST vulnerability Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4 |