Denial of Service Vulnerability in F5 BIG-IP ASM and DataSafe Configuration
CVE-2021-23036

7.5HIGH

Key Information:

Vendor

F5
Status
Big-ip Advanced Waf And Big-ip Asm
Vendor
CVE Published:
14 September 2021

What is CVE-2021-23036?

A vulnerability exists in F5 BIG-IP versions prior to 16.0.1.2 when configured with both ASM and DataSafe profiles. Undisclosed requests can lead to unexpected termination of the Traffic Management Microkernel (TMM), resulting in potential service interruptions. Users are advised to upgrade to the latest supported versions to mitigate this issue. Additionally, software that has reached End of Technical Support is not assessed in this context.

Affected Version(s)

BIG-IP Advanced WAF and BIG-IP ASM 16.0.x before 16.0.1.2

References

https://support.f5.com/csp/article/K05043394
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.