BIG-IP

CVE-2024-41727: BIG-IP TMM vulnerability

In BIG-IP tenants running on r2000 and r4000 series hardware, or BIG-IP Virtual Edition (VEs) using Intel E810 SR-IOV NIC, undisclosed traffic can cause an increase in memory resource utilization.

Published

ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityHIGHCVSS 4.0 8.7
EPSS0.48%Chance of exploitation in 30 days
Public exploitNot tracked
FixAvailable

Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.

Affected and fixed versions

Product / branchFixed in
BIG-IP (r2000, r4000) 17.1Not affected
BIG-IP (r2000, r4000) 16.116.1.5 or later
BIG-IP (r2000, r4000) 15.1* or later

Always confirm against the vendor advisory, which lists every fixed hotfix.

What it is

In BIG-IP tenants running on r2000 and r4000 series hardware, or BIG-IP Virtual Edition (VEs) using Intel E810 SR-IOV NIC, undisclosed traffic can cause an increase in memory resource utilization.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Sources

KEV status, EPSS score and vendor data refreshed automatically, last on 12 Oct 2026.

Get alerts

A notification when we publish a new analysis or a covered vendor gets a new actively exploited CVE. No account, no email.