CISA Known Exploited Vulnerability

CVE-2021-22991

F5 · BIG-IP Traffic Management Microkernel

F5 BIG-IP Traffic Management Microkernel Buffer Overflow

Date added
BOD 22-01 due date
CWE CWE-119
Ransomware Unknown

CISA description

The Traffic Management Microkernel of BIG-IP ASM Risk Engine has a buffer overflow vulnerability, leading to a bypassing of URL-based access controls.

Required action

Apply updates per vendor instructions.