BugZero | F5 BugID 892941 - F5 SSL Orchestrator may fail to stop a malicious a...

Loading...

F5 - Defect ID: 892941

F5 SSL Orchestrator may fail to stop a malicious actor from exfiltrating data on a compromised client system (SNIcat)

F5 - Defect ID: 892941

F5 SSL Orchestrator may fail to stop a malicious actor from exfiltrating data on a compromised client system (SNIcat)

Last updated on July 18th, 2026

BugZero Risk Score
6.7 Medium

Overall: 6.7

Severity: 7.3

Community: 4.2

Lifecycle: 7.0

What is the BugZero Risk Score?

F5 Integration

Learn more about where this data comes from

F5 Integration

BugZero Plan

Streamline upgrades with automated vendor bug scrubs

BugZero Plan

BugZero Prevent

Wish you caught this bug sooner? Get proactive today.

BugZero Prevent

Bug Details

Priority: 3-Major
Status: Verified
Impact Category: Local Traffic Manager

Description

Symptoms

For more information, please see: https://support.f5.com/csp/article/K20105555

Impact

For more information, please see: https://support.f5.com/csp/article/K20105555

Conditions

For more information, please see: https://support.f5.com/csp/article/K20105555

Workaround

For more information, please see: https://support.f5.com/csp/article/K20105555

Fix Information

For more information, please see: https://support.f5.com/csp/article/K20105555

Change history

Links

Original Vendor Announcement

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Fixed versions: 16.1.0, 16.0.1.1, 15.1.2, 14.1.4

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Fixed versions: 16.1.0, 16.0.1.1, 15.1.2, 14.1.4

Top F5 Defects

9.6Defect ID: 546260
TMM can crash if using the v6rd profile
9.6Defect ID: 934133
Unable to Create/delete ltm virtual server via CLI transaction when destination is not specified on the ltm virtual object
9.6Defect ID: 1154417
Profile based attack is not mitigated at hardware on L2 wire setup
9.6Defect ID: 913713
Rebooting a blade causes MCPd to core as it rejoins the cluster
9.6Defect ID: 2141125
Multicast traffic is dropped with incorrect VLAN tagging

F5 Integration

Learn more about where this data comes from

F5 Integration

BugZero Plan

Streamline upgrades with automated vendor bug scrubs

BugZero Plan

BugZero Prevent

Wish you caught this bug sooner? Get proactive today.

BugZero Prevent

Ready to prevent the next vendor outage?