{"id":"CVE-2017-6162","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-6162","generatedAt":"2026-10-29T01:46:10.413Z","title":"In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, 11.2.1, in some cases TMM may crash when processing TCP traffic.","description":"In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, 11.2.1, in some cases TMM may crash when processing TCP traffic. This vulnerability affects TMM via a virtual server configured with TCP profile. Traffic processing is disrupted while Traffic Management Microkernel (TMM) restarts. If the affected BIG-IP system is configured to be part of a device group, it will trigger a failover to the peer device.","published":"2017-10-27T14:29:00.000Z","lastModified":"2026-06-17T01:21:52.000Z","status":"Modified","sourceIdentifier":"f5sirt@f5.com","cvss":{"version":"3.0","score":5.9,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-119"],"affected":["f5/big-ip local traffic manager","f5/big-ip application acceleration manager","f5/big-ip advanced firewall manager","f5/big-ip access policy manager","f5/big-ip application security manager","f5/big-ip link controller","f5/big-ip policy enforcement manager","f5/big-ip websafe"],"epss":{"score":0.01674,"percentile":0.76732,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.67%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/101635","tags":["Third Party Advisory","VDB Entry"],"source":"f5sirt@f5.com"},{"url":"http://www.securitytracker.com/id/1039673","tags":["Third Party Advisory","VDB Entry"],"source":"f5sirt@f5.com"},{"url":"https://support.f5.com/csp/article/K13421245","tags":["Vendor Advisory"],"source":"f5sirt@f5.com"},{"url":"http://www.securityfocus.com/bid/101635","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1039673","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K13421245","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-6162","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}