K11718033 : TMM WebSocket vulnerability CVE-2018-5504

Security Advisory Description

In some circumstances, the Traffic Management Microkernel (TMM) does not properly handle certain malformed WebSocket requests/responses, which allows remote attackers to cause a denial of service (DoS) or possible remote code execution on the BIG-IP system. (CVE-2018-5504)

Impact

This vulnerability allows unauthorized remote code execution and disruption of service through an unspecified crafted WebSocket packet.