K00602225 : Advanced WAF and BIG-IP ASM vulnerability CVE-2021-23028

Security Advisory Description

When JSON content profiles are configured for URLs as part of an F5 Advanced Web Application Firewall (WAF)/BIG-IP ASM security policy and applied to a virtual server, undisclosed requests may cause the BIG-IP ASM bd process to terminate. (CVE-2021-23028)

Impact

Traffic is disrupted while the BIG-IP ASM bd process restarts. This vulnerability allows a remote attacker to cause a denial-of-service (DoS) on the BIG-IP system. There is no control plane exposure; this is a data plane issue only.