CVE-2025-43878

MEDIUM

6.0

Descricao

When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing system diagnostics tcpdump command utility on a F5OS-C/A system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Detalhes CVE

Pontuacao CVSS v3.16.0

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Vetor de ataqueLOCAL

ComplexidadeLOW

Privilegios necessariosHIGH

Interacao do usuarioNONE

Publicado5/7/2025

Ultima modificacao11/7/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

f5:f5os-af5:f5os-cf5:r10600f5:r10800f5:r10900f5:r12600-dsf5:r12800-dsf5:r12900-dsf5:r5600f5:r5800f5:r5900f5:velos_cx1610f5:velos_cx410

Fraquezas (CWE)

CWE-149CWE-1286

Referencias

https://my.f5.com/manage/s/article/K000139502(f5sirt@f5.com)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.