K93526903 : BIG-IP APM portal access vulnerability CVE-2022-23014

Security Advisory Description

When BIG-IP APM portal access is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. (CVE-2022-23014)

Impact

Traffic is disrupted while the TMM process restarts. This vulnerability allows an authenticated remote attacker to cause a denial-of-service (DoS) on the BIG-IP system. There is no control plane exposure; this is a data plane issue only.