Aller au contenu
en Se connecter
4.6 Moyenne

CVE-2025-60013 When a highly-privileged, authenticated attacker attempts to initialize the rSeries FIPS module using a password with…

Description

When a highly-privileged, authenticated attacker attempts to initialize the rSeries FIPS module using a password with special shell metacharacters, arbitrary system commands may be executed, and the FIPS hardware security module (HSM) may fail to initialize. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Produits et versions touchés

Produit Versions touchées Corrigé en
F5OS - Appliance 1.8 1.8.0 → < 1.8.3 1.8.3
F5OS - Appliance 1.5 1.5.0 → < 1.5.4 1.5.4

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de F5OS - Appliance

Les 12 CVE de F5OS - Appliance →
CVE-2025-57780 A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to… 8.8 Élevée CVE-2025-53860 A vulnerability exists in F5OS-A software that allows a highly privileged authenticated attacker to access sensitive… 4.1 Moyenne CVE-2025-60015 An out-of-bounds write vulnerability exists in F5OS-A and F5OS-C that could lead to memory corruption.  Note: Software… 5.7 Moyenne CVE-2025-61955 A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to… 8.8 Élevée
Suivre cette CVE