CVE-2024-23982

BIG-IP PEM vulnerability

Published Feb 14, 2024 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description



When a BIG-IP PEM classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. This issue affects classification engines using signatures released between 09-08-2022 and 02-16-2023. See the table in the F5 Security Advisory for a complete list of affected classification signature files.  NOTE: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-21408 When a BIG-IP PEM classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. This issue affects classification engines using signatures released between 09-08-2022 and 02-16-2023. See the table in the F5 Security Advisory for a complete list of affected classification signature files.  NOTE: Software versions which have reached End of Technical Support (EoTS) are not evaluated
History
Type Values Removed Values Added
First Time appeared F5
F5 big-ip Policy Enforcement Manager
Weaknesses CWE-787
CPEs cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*
Vendors & Products F5
F5 big-ip Policy Enforcement Manager
Weaknesses

Sources

Status
PUBLISHED
Assigner
f5
Published
Updated
Aug 21, 2024, 3:47 PM
Reserved
Feb 1, 2024, 10:13 PM
Status
Analyzed
Published
Feb 14, 2024, 5:15 PM
Modified
Jun 17, 2026, 7:13 AM