K000133132 : BIG-IP TMM SSL vulnerability CVE-2023-24594

Security Advisory Description

When an SSL profile is configured on a virtual server, undisclosed traffic can cause an increase in CPU or SSL accelerator resource utilization. (CVE-2023-24594)

Impact

System performance can degrade until the attacker’s connections are closed. This vulnerability allows a remote, unauthenticated attacker to cause a degradation of service that can lead to a denial-of-service (DoS) on the BIG-IP system. There is no control plane exposure; this is a data plane issue only.