CVE-2021-23039: Input Validation
On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.2.8, and all versions of 13.1.x and 12.1.x, when IPSec is configured on a BIG-IP system, undisclosed requests from an authorized remote (IPSec) peer, which already has a negotiated Security Association, can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-23039?
CVE-2021-23039 has a severity rating that indicates it poses a significant risk to affected systems due to potential exploitation.
How do I fix CVE-2021-23039?
To fix CVE-2021-23039, upgrade your F5 BIG-IP systems to the latest versions that include the patch.
Which versions are affected by CVE-2021-23039?
CVE-2021-23039 affects F5 BIG-IP Access Policy Manager, Advanced Firewall Manager, Analytics, Application Security Manager, and other products in specified versions before the respective patches.
What type of vulnerability is CVE-2021-23039?
CVE-2021-23039 is classified as a vulnerability that allows unauthorized requests to potentially disrupt traffic flow on affected BIG-IP systems.
Can CVE-2021-23039 be exploited remotely?
Yes, CVE-2021-23039 can be exploited remotely by an authorized peer with an existing Security Association, affecting the IPSec configuration.