High · published October 15, 2025
⚡ A hidden traffic issue could crash your BIG-IP Advanced WAF, like an unexpected power surge shutting down a busy restaurant! Imagine a restaurant where the chef is so overwhelmed with unexpected orders that the kitchen simply shuts down—it leaves everyone hanging! That's similar to how undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate unexpectedly. If this vulnerability is exploited, it could lead to service disruptions, causing your security measures to falter at critical moments. This means attackers might find opportunities to exploit the situation, leaving your system vulnerable to other threats.
Imagine a restaurant where the chef is so overwhelmed with unexpected orders that the kitchen simply shuts down—it leaves everyone hanging! That's similar to how undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate unexpectedly. This vulnerability affects BIG-IP Advanced WAF and ASM when improperly configured with a server-side HTTP/2 profile, leading to a termination in the Traffic Management Microkernel (TMM) due to undisclosed traffic, which can interrupt service.
If this vulnerability is exploited, it could lead to service disruptions, causing your security measures to falter at critical moments. This means attackers might find opportunities to exploit the situation, leaving your system vulnerable to other threats. To safeguard your systems, review the configuration of your virtual servers, ensuring that the security policy and HTTP/2 profiles are properly set up. Regularly update your software to the latest supported version, and consult F5’s documentation for best practices. You’ve got this! With a few adjustments, you can keep your systems running smoothly and secure. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| f5/big-ip_application_security_manager | ≥ 16.1.0, < 16.1.6 | 16.1.6 |
| f5/big-ip_application_security_manager | ≥ 17.1.0, ≤ 17.1.2 | — |