F5 F5os-a vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting F5 F5os-a: 6 record(s), with affected versions and fixes.cpe:2.3:o:f5:f5os-a
CVE-2025-57780
High · 8.8
CWE-250 Oct 15, 2025
F5OS Vulnerability
A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to escalate their privileges. A successful exploit may allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-53860
Medium · 4.1
CWE-214 Oct 15, 2025
F5OS-A FIPS HSM vulnerability
A vulnerability exists in F5OS-A software that allows a highly privileged authenticated attacker to access sensitive FIPS hardware security module (HSM) information on F5 rSeries systems. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-61955
High · 8.8
CWE-95 Oct 15, 2025
F5OS vulnerability
A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to escalate their privileges. A successful exploit may allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-60015
Medium · 5.7
CWE-787 Oct 15, 2025
F5OS out-of-bounds write vulnerability
An out-of-bounds write vulnerability exists in F5OS-A and F5OS-C that could lead to memory corruption.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-60013
Medium · 4.6
CWE-78 Oct 15, 2025
F5OS-A FIPS HSM password vulnerability
When a highly-privileged, authenticated attacker attempts to initialize the rSeries FIPS module using a password with special shell metacharacters, arbitrary system commands may be executed, and the FIPS hardware security module (HSM) may fail to initialize. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-47150
Medium · 6.5
CWE-401 Oct 15, 2025
F5OS SNMP vulnerability
When SNMP is configured on F5OS Appliance and Chassis systems, undisclosed requests can cause an increase in SNMP memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.