FKIE_CVE-2025-43878

Vulnerability from fkie_nvd - Published: 2025-05-07 22:15 - Updated: 2025-11-07 16:54
Severity ?
6.0 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Summary
When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing system diagnostics tcpdump command utility on a F5OS-C/A system.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
References
f5sirt@f5.comhttps://my.f5.com/manage/s/article/K000139502Vendor Advisory
Impacted products
Vendor Product Version
f5 f5os-a *
f5 f5os-c *
f5 r10600 -
f5 r10800 -
f5 r10900 -
f5 r12600-ds -
f5 r12800-ds -
f5 r12900-ds -
f5 r5600 -
f5 r5800 -
f5 r5900 -
f5 velos_cx1610 -
f5 velos_cx410 -
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:f5:f5os-a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C4745016-45DE-4276-8281-95A6CE81DC46",
              "versionEndExcluding": "1.8.0",
              "versionStartIncluding": "1.5.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:f5:f5os-c:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CF2910A9-DD68-4E44-8805-3392DA88A297",
              "versionEndIncluding": "1.6.2",
              "versionStartIncluding": "1.6.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:f5:r10600:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4B494DEE-B373-4B3F-95C1-2E0997F32B6E",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:f5:r10800:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5BC625D5-C59F-4D20-BA92-0EC85DAB8AFA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:f5:r10900:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4233544A-999C-42CD-9B61-E639AAA460B9",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:f5:r12600-ds:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C6219686-1E3F-4CDE-9FC4-F73BD955673B",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:f5:r12800-ds:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A18BFB9A-11E7-4E9B-BF73-2A87EBE778BE",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:f5:r12900-ds:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7E078C9F-98BC-42D4-9876-06952239EE17",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:f5:r5600:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "24DA75BA-A4B7-46BD-887D-03CDFAF22791",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:f5:r5800:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "52B4EBB6-BEEB-42DA-A146-10E401226BED",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:f5:r5900:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "55433400-8996-44B8-94D7-81690145EF94",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:f5:velos_cx1610:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8C75C91-81A8-455B-AF36-8DF24C0365FB",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:f5:velos_cx410:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "495302C5-8C7D-4D2C-985C-B18E26D8C7DC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing system diagnostics tcpdump command utility on a F5OS-C/A system.\u00a0\n\n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
    },
    {
      "lang": "es",
      "value": "Al ejecutarse en modo Dispositivo, un atacante autenticado con el rol de Administrador o Administrador de Recursos podr\u00eda eludir las restricciones del modo Dispositivo mediante la utilidad de diagn\u00f3stico del sistema tcpdump en un sistema F5OS-C/A. Nota: Las versiones de software que han alcanzado el fin del soporte t\u00e9cnico (EoTS) no se eval\u00faan."
    }
  ],
  "id": "CVE-2025-43878",
  "lastModified": "2025-11-07T16:54:44.003",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 6.0,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 5.2,
        "source": "f5sirt@f5.com",
        "type": "Secondary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "LOCAL",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 8.3,
          "baseSeverity": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "HIGH",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "NONE",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "HIGH",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "f5sirt@f5.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-05-07T22:15:20.867",
  "references": [
    {
      "source": "f5sirt@f5.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://my.f5.com/manage/s/article/K000139502"
    }
  ],
  "sourceIdentifier": "f5sirt@f5.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-149"
        },
        {
          "lang": "en",
          "value": "CWE-1286"
        }
      ],
      "source": "f5sirt@f5.com",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.