CVE-2021-22976

🗓️ 12 Feb 2021 17:43:49Reported by f5Type

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 83 Views

BIG-IP Advanced WAF/ASM 16.0.x-12.1.x has CPU usage vulnerabilit

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-22976	12 Feb 202120:43	–	circl
CNNVD	BIG-IP Advanced WAF and ASM Resource Management Error Vulnerability	11 Feb 202100:00	–	cnnvd
Cvelist	CVE-2021-22976	12 Feb 202117:43	–	cvelist
EUVD	EUVD-2021-10094	7 Oct 202500:30	–	euvd
F5 Networks	K88230177: BIG-IP ASM WebSocket vulnerability CVE-2021-22976	21 Feb 202318:55	–	f5
Tenable Nessus	F5 Networks BIG-IP : BIG-IP ASM WebSocket vulnerability (K88230177)	11 Feb 202100:00	–	nessus
NCSC	Multiple vulnerabilities fixed in F5 BIG-IP products	11 Feb 202100:00	–	ncsc
NVD	CVE-2021-22976	12 Feb 202118:15	–	nvd
Prion	Code injection	12 Feb 202118:15	–	prion
RedhatCVE	CVE-2021-22976	22 May 202518:22	–	redhatcve

NVD

Node

f5 big-ip_advanced_web_application_firewallRange12.1.0–12.1.5

f5 big-ip_advanced_web_application_firewallRange13.1.0–13.1.3.6

f5 big-ip_advanced_web_application_firewallRange14.1.0–14.1.3.1

f5 big-ip_advanced_web_application_firewallRange15.1.0–15.1.2

f5 big-ip_advanced_web_application_firewallRange16.0.0–16.0.1.1

f5 big-ip_application_security_managerRange12.1.0–12.1.5

f5 big-ip_application_security_managerRange13.1.0–13.1.3.6

f5 big-ip_application_security_managerRange14.1.0–14.1.3.1

f5 big-ip_application_security_managerRange15.1.0–15.1.2

f5 big-ip_application_security_managerRange16.0.0–16.0.1.1

[
  {
    "product": "BIG-IP Advanced WAF & BIG-IP ASM",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, and all 12.1.x versions"
      }
    ]
  }
]

Source	Link
support	www.support.f5.com/csp/article/K88230177

21 Nov 2024 05:51Current

7.5High risk

Vulners AI Score7.5

CVSS 25

CVSS 3.17.5

EPSS0.00647