7.3
High
CVE-2025-48500 A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local,…
Description
A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BIG-IP Edge Client 7.2 | 7.2.4 → < 7.2.5.3 | 7.2.5.3 |
| BIG-IP 17.5 | 17.5.0 → latest | No fix stated |
| BIG-IP 17.1 | 17.1.0 → latest | No fix stated |
| BIG-IP 16.1 | 16.1.0 → latest | No fix stated |
| BIG-IP 15.1 | 15.1.0 → latest | No fix stated |
References
- my.f5.com my.f5.com
Timeline
- Published
- Last modified
Other CVEs of BIG-IP Edge Client
The 11 CVEs of BIG-IP Edge Client →
CVE-2026-20730
A vulnerability exists in BIG-IP Edge Client and browser VPN clients on Windows that may allow attackers to gain…
3.3
Low
CVE-2024-28883
An origin validation vulnerability exists in BIG-IP APM browser network access VPN client for Windows, macOS and…
7.4
High
CVE-2023-43611
The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the…
7.8
High
CVE-2023-5450
An insufficient verification of data vulnerability exists in BIG-IP Edge Client Installer on macOS that may allow an…
7.3
High