Skip to content
Sign in
7.4 High

CVE-2025-54809 F5 Access for Android before version 3.1.2 which uses HTTPS does not verify the remote endpoint identity

Description

F5 Access for Android before version 3.1.2 which uses HTTPS does not verify the remote endpoint identity. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products and versions

Product Affected versions Fixed in
F5 Access 3.1 3.1.0 → < 3.1.2 3.1.2

Other CVEs of F5 Access

The 3 CVEs of F5 Access →
CVE-2023-43125 BIG-IP APM clients may send IP traffic outside of the VPN tunnel.  Note: Software versions which have reached End of… 6.8 Medium CVE-2023-43124 BIG-IP APM clients may send IP traffic outside of the VPN tunnel.  Note: Software versions which have reached End of… 5.3 Medium
Track this CVE