CVE-2025-57780CWE-250

CVE-2025-57780

High · published October 15, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
10.3
In the wild
Unconfirmed
What it is

⚡ An authenticated attacker can level up their privileges with a local access exploit in F5OS-A and F5OS-C! Think of it like a hotel where a guest finds a way to access the staff-only areas. They might be able to snoop around, access sensitive files, or even change reservations—causing chaos behind the scenes! If successfully exploited, an attacker could cross security boundaries and gain access to restricted areas of the system, potentially leading to unauthorized actions or sensitive data exposure. This could result in compromised systems and significant impacts on overall security, which is absolutely devastating!

Put simply

Think of it like a hotel where a guest finds a way to access the staff-only areas. They might be able to snoop around, access sensitive files, or even change reservations—causing chaos behind the scenes! This vulnerability allows an authenticated local attacker to escalate their privileges, breaching designated security boundaries within the F5OS-A and F5OS-C systems. This means they could perform actions they normally wouldn't be authorized to do, which is a major risk.

What to do

If successfully exploited, an attacker could cross security boundaries and gain access to restricted areas of the system, potentially leading to unauthorized actions or sensitive data exposure. This could result in compromised systems and significant impacts on overall security, which is absolutely devastating! Ensure you upgrade to the latest supported version of F5OS-A and F5OS-C to mitigate this privilege escalation risk. Regularly review your access controls and monitor for any suspicious activities. Don't forget to limit local access only to trusted users! You've got this! Follow these steps and you’ll be strengthening your defenses in no time! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00207 · 10.3th percentile
Weakness
CWE-250 · Execution with Unnecessary Privileges
Published
2025-10-15T20:15Z
Affected products (4)
ProductVersionsFixed in
f5/f5os-a≥ 1.5.1, < 1.5.41.5.4
f5/f5os-aall versions—
f5/f5os-c≥ 1.6.0, ≤ 1.6.2—
f5/f5os-c≥ 1.8.0, < 1.8.21.8.2
References (1)
EPSS history
Timeline
  • 15 OCT 15:19Z
    F5OS Vulnerability
    cvelistv5