Lucene search

K
f5F5F5:K54892865
HistoryJan 19, 2022 - 12:00 a.m.

K54892865 : BIG-IP AFM vulnerability CVE-2022-23024

2022-01-1900:00:00
my.f5.com
9
big-ip
afm
cve-2022-23024
ipsec
tmm
denial-of-service

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

39.4%

Security Advisory Description

When the IPsec application layer gateway (ALG) logging profile is configured on an IPsec ALG virtual server, undisclosed IPsec traffic can cause the Traffic Management Microkernel (TMM) to terminate. (CVE-2022-23024)

Impact

Traffic is disrupted while the TMM process restarts. This vulnerability allows a remote attacker to cause a denial-of-service (DoS) on the BIG-IP system. There is no control plane exposure; this is a data plane issue only.

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

39.4%