CVE-2025-43878

Estado: AnalizadaAlta (8.3)—

When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing system diagnostics tcpdump command utility on a F5OS-C/A system.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVSS

Versión: 4.0
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Puntuación base: 8.3

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 0.17%
Percentil entre todas las CVEs puntuadas: 6
Fecha de la puntuación: 5/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

ExplotaciónT1068 Exploitation for Privilege Escalationprivilege escalation85 %
Impacto principalT1005 Data from Local Systemcollection75 %
Impacto secundarioT1552 Unsecured Credentialscredential access70 %

Acceso local (AV:L) con privilegios elevados (PR:H) permite al administrador autenticado eludir restricciones de modo Appliance mediante tcpdump, capturando tráfico de red y datos sensibles.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Update Software Active Directory Configuration User Training Threat Intelligence Program Restrict File and Directory Permissions Privileged Account Management

Tecnologías afectadas (2)

F5 — F5os-a F5 — F5os-c

CWE

CWE-149, CWE-1286

Referencias

https://my.f5.com/manage/s/article/K000139502

JSON original (NVD)

Mostrar

{
  "id": "CVE-2025-43878",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-43878",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-05-08T03:56:27.221854Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "f5sirt@f5.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 0.8
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "f5sirt@f5.com",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 8.3,
          "Automatable": "NOT_DEFINED",
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "HIGH",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "HIGH",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "NONE",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "NONE",
          "vulnConfidentialityImpact": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "f5sirt@f5.com",
      "affectedData": [
        {
          "vendor": "F5",
          "product": "F5OS - Appliance",
          "versions": [
            {
              "status": "affected",
              "version": "1.5.1",
              "lessThan": "1.8.0",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "F5",
          "product": "F5OS - Chassis",
          "versions": [
            {
              "status": "affected",
              "version": "1.6.0",
              "lessThan": "1.8.0",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2025-05-07T22:15:20.867",
  "references": [
    {
      "url": "https://my.f5.com/manage/s/article/K000139502",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "f5sirt@f5.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "f5sirt@f5.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-149"
        },
        {
          "lang": "en",
          "value": "CWE-1286"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing system diagnostics tcpdump command utility on a F5OS-C/A system. \n\n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
    },
    {
      "lang": "es",
      "value": "Al ejecutarse en modo Dispositivo, un atacante autenticado con el rol de Administrador o Administrador de Recursos podría eludir las restricciones del modo Dispositivo mediante la utilidad de diagnóstico del sistema tcpdump en un sistema F5OS-C/A. Nota: Las versiones de software que han alcanzado el fin del soporte técnico (EoTS) no se evalúan."
    }
  ],
  "lastModified": "2026-06-17T09:24:40.983",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:f5:f5os-a:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C4745016-45DE-4276-8281-95A6CE81DC46",
              "versionEndExcluding": "1.8.0",
              "versionStartIncluding": "1.5.1"
            },
            {
              "criteria": "cpe:2.3:o:f5:f5os-c:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF2910A9-DD68-4E44-8805-3392DA88A297",
              "versionEndIncluding": "1.6.2",
              "versionStartIncluding": "1.6.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:f5:r10600:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4B494DEE-B373-4B3F-95C1-2E0997F32B6E"
            },
            {
              "criteria": "cpe:2.3:h:f5:r10800:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5BC625D5-C59F-4D20-BA92-0EC85DAB8AFA"
            },
            {
              "criteria": "cpe:2.3:h:f5:r10900:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4233544A-999C-42CD-9B61-E639AAA460B9"
            },
            {
              "criteria": "cpe:2.3:h:f5:r12600-ds:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C6219686-1E3F-4CDE-9FC4-F73BD955673B"
            },
            {
              "criteria": "cpe:2.3:h:f5:r12800-ds:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A18BFB9A-11E7-4E9B-BF73-2A87EBE778BE"
            },
            {
              "criteria": "cpe:2.3:h:f5:r12900-ds:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7E078C9F-98BC-42D4-9876-06952239EE17"
            },
            {
              "criteria": "cpe:2.3:h:f5:r5600:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "24DA75BA-A4B7-46BD-887D-03CDFAF22791"
            },
            {
              "criteria": "cpe:2.3:h:f5:r5800:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "52B4EBB6-BEEB-42DA-A146-10E401226BED"
            },
            {
              "criteria": "cpe:2.3:h:f5:r5900:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "55433400-8996-44B8-94D7-81690145EF94"
            },
            {
              "criteria": "cpe:2.3:h:f5:velos_cx1610:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E8C75C91-81A8-455B-AF36-8DF24C0365FB"
            },
            {
              "criteria": "cpe:2.3:h:f5:velos_cx410:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "495302C5-8C7D-4D2C-985C-B18E26D8C7DC"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "f5sirt@f5.com"
}