When the BIG-IP Advanced WAF and ASM security policy and a server-side HTTP/2 profile are configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://my.f5.com/manage/s/article/K000150752 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 8.7 · f5NVD modified 2026-10-08 12:10
Affected (CPE criteria) 1
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
References 1
- https://my.f5.com/manage/s/article/K000150752 Vendor Advisory