Skip to content
CVE PROGRAM SOURCE RECORD9.2 Critical

CVE-2025-36546

F5OS Appliance Mode vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
f5

Description

On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication, and then enabled Appliance Mode; access via SSH key-based authentication is still allowed. For an attacker to exploit this vulnerability they must obtain the root user's SSH private key.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

F5 F5OS - Appliance

Default version status: unknown

  • 1.7.0 to < 1.8.0affected
  • 1.5.1 to < 1.5.3affected

F5 F5OS - Chassis

Default version status: unknown

  • 1.6.0 to < 1.8.0affected

References