CVE-2024-21849 BIG-IP Websockets vulnerability

2024-02-1416:30:21

CWE-466

raw.githubusercontent.com

cve-2024-21849

big-ip

websockets

tmm process

security policy

virtual server

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.4%

JSON

When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.