CVE-2025-43878

published 2025-05-07

CVE-2025-43878: When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode…

high 8.3 CVSS 4.0

AV L AC L AT N PR H UI N VC H VI H VA N SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing system diagnostics tcpdump command utility on a F5OS-C/A system.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
f5	f5os-a	—	—
f5	f5os-a	>= 1.5.1 < 1.8.0	1.8.0
f5	f5os-c	—	—
f5	f5os-c	1.6.0 – 1.6.2	—
f5	f5os_appliance	>= 1.5.1 < 1.8.0	1.8.0
f5	f5os_chassis	>= 1.6.0 < 1.8.0	1.8.0

CWE-149 CWE-1286