CVE-2025-43878 — F5OS-A/C CLI vulnerability

CVE-2025-43878

F5OS-A/C CLI vulnerability PUBLISHED

Description (CNA)

When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing system diagnostics tcpdump command utility on a F5OS-C/A system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected (CNA)

Vendor / product	Versions
F5 / F5OS - Appliance	affected 1.5.1 before 1.8.0
F5 / F5OS - Chassis	affected 1.6.0 before 1.8.0

CWE

CWE-149, CWE-1286

References

https://my.f5.com/manage/s/article/K000139502

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.