Read the docs
TI-2025-28455 Aliases CVE-2025-43878GHSA-jv2x-vg3f-2535

F5OS-A/C CLI vulnerability

Priority LOW 37CWE-1286Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing system diagnostics tcpdump command utility on a F5OS-C/A system.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00172 6th percentileScored 2026-11-07
Fix Fixed F5OS - Appliance (F5): 1.8.0F5OS - Chassis (F5): 1.8.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
F5F5OS - Appliance1.5.1 to before 1.8.01.8.0Patch availableCNA
F5F5OS - Chassis1.6.0 to before 1.8.01.8.0Patch availableCNA
  • F5OS - Appliance VendorF5 Affected 1.5.1 to before 1.8.0 Fixed in 1.8.0 Patch available CNA
  • F5OS - Chassis VendorF5 Affected 1.6.0 to before 1.8.0 Fixed in 1.8.0 Patch available CNA

CPE configurations NVD · 13

CPEVersionsRoleVendor
cpe:2.3:o:f5:f5os-a:*:*:*:*:*:*:*:*1.5.1 to before 1.8.0VulnerableF5
cpe:2.3:o:f5:f5os-c:*:*:*:*:*:*:*:*1.6.0 – 1.6.2VulnerableF5
cpe:2.3:h:f5:r10600:-:*:*:*:*:*:*:*not specified by NVDRunning onF5
cpe:2.3:h:f5:r10800:-:*:*:*:*:*:*:*not specified by NVDRunning onF5
cpe:2.3:h:f5:r10900:-:*:*:*:*:*:*:*not specified by NVDRunning onF5
cpe:2.3:h:f5:r12600-ds:-:*:*:*:*:*:*:*not specified by NVDRunning onF5
cpe:2.3:h:f5:r12800-ds:-:*:*:*:*:*:*:*not specified by NVDRunning onF5
cpe:2.3:h:f5:r12900-ds:-:*:*:*:*:*:*:*not specified by NVDRunning onF5
cpe:2.3:h:f5:r5600:-:*:*:*:*:*:*:*not specified by NVDRunning onF5
cpe:2.3:h:f5:r5800:-:*:*:*:*:*:*:*not specified by NVDRunning onF5
  • cpe:2.3:o:f5:f5os-a:*:*:*:*:*:*:*:* Versions 1.5.1 to before 1.8.0 Vulnerable ·F5
  • cpe:2.3:o:f5:f5os-c:*:*:*:*:*:*:*:* Versions 1.6.0 – 1.6.2 Vulnerable ·F5
  • cpe:2.3:h:f5:r10600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
  • cpe:2.3:h:f5:r10800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
  • cpe:2.3:h:f5:r10900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
  • cpe:2.3:h:f5:r12600-ds:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
  • cpe:2.3:h:f5:r12800-ds:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
  • cpe:2.3:h:f5:r12900-ds:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
  • cpe:2.3:h:f5:r5600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
  • cpe:2.3:h:f5:r5800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
Show 3 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:f5:r5900:-:*:*:*:*:*:*:*not specified by NVDRunning onF5
cpe:2.3:h:f5:velos_cx1610:-:*:*:*:*:*:*:*not specified by NVDRunning onF5
cpe:2.3:h:f5:velos_cx410:-:*:*:*:*:*:*:*not specified by NVDRunning onF5
  • cpe:2.3:h:f5:r5900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
  • cpe:2.3:h:f5:velos_cx1610:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
  • cpe:2.3:h:f5:velos_cx410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5

Remediation

  • Fix · CNA F5OS - Appliance (F5) Fixed in 1.8.0
  • Fix · CNA F5OS - Chassis (F5) Fixed in 1.8.0

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    F5 F5OS - Chassis 1.8.0

    3 records Highest priority Priority MEDIUM 2 MEDIUM, 1 LOW

    Other records, highest priority first

    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-43878
  2. 2026-10-03 Alias added: GHSA-jv2x-vg3f-2535

References

Advisory 1

  • TI-2002-02356 The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side)… CVSS 3.1HIGH 7.5
  • TI-2025-24871 F5OS Appliance Mode vulnerability CVSS 4.0CRITICAL 9.2
  • TI-2025-29017 F5OS vulnerability CVSS 4.0HIGH 8.7
  • TI-2025-38297 F5OS vulnerability CVSS 4.0HIGH 8.5
  • TI-2025-35664 F5OS Vulnerability CVSS 4.0HIGH 8.5
  • TI-2022-20188 F5OS vulnerability CVE-2022-41835 CVSS 3.1HIGH 8.8
See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences