CVE-2024-21849
HIGHDescription
When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Is your site exposed to CVE-2024-21849?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| f5 | big-ip_advanced_web_application_firewall |
| f5 | big-ip_application_security_manager |
References
Frequently Asked Questions
What is CVE-2024-21849? +
How severe is CVE-2024-21849? +
What products are affected by CVE-2024-21849? +
How do I check if I'm vulnerable to CVE-2024-21849? +
Related Vulnerabilities
nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory …
A Return of Pointer Value Outside of Expected Range vulnerability in the fileio library of Juniper Networks Junos OS and …
When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code …
On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may be authorized with higher privilege …
Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an authenticated attacker …
A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to escalate their …