Firetruck

CVE-2021-22991

KEV

F5 BIG-IP Traffic Management Microkernel Buffer Overflow

View CVE record →
Vendor / Project
F5
Product
BIG-IP Traffic Management Microkernel
Date added
Jan 18, 2022
Due date
Feb 1, 2022
Known ransomware use
Unknown
CWEs
CWE-119

Description

The Traffic Management Microkernel of BIG-IP ASM Risk Engine has a buffer overflow vulnerability, leading to a bypassing of URL-based access controls.

Required action

Apply updates per vendor instructions.

Notes