Skip to content
fr Sign in
8.1 High

CVE-2025-36546 On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based…

Description

On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication, and then enabled Appliance Mode; access via SSH key-based authentication is still allowed. For an attacker to exploit this vulnerability they must obtain the root user's SSH private key.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products and versions

Product Affected versions Fixed in
F5OS - Appliance 1.7 1.7.0 → < 1.8.0 1.8.0
F5OS - Appliance 1.5 1.5.1 → < 1.5.3 1.5.3
F5OS - Chassis 1.6 1.6.0 → < 1.8.0 1.8.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of F5OS - Appliance

The 12 CVEs of F5OS - Appliance →
CVE-2025-57780 A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to… 8.8 High CVE-2025-53860 A vulnerability exists in F5OS-A software that allows a highly privileged authenticated attacker to access sensitive… 4.1 Medium CVE-2025-60015 An out-of-bounds write vulnerability exists in F5OS-A and F5OS-C that could lead to memory corruption.  Note: Software… 5.7 Medium CVE-2025-61955 A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to… 8.8 High
Track this CVE