F5 BIG-IP Appliance Mode Bypass Vulnerability via SCP and SFTP

A vulnerability exists in F5 BIG-IP when running in Appliance mode, allowing a highly privileged authenticated attacker with access to SCP and SFTP to bypass Appliance mode restrictions using undisclosed commands. This issue is limited to the control plane, with no exposure in the data plane.

Impact

Exploitation of this vulnerability could lead to unauthorized bypassing of Appliance mode restrictions, potentially allowing attackers to execute commands that could disrupt normal operations or compromise the system.

Remediation

Users can upgrade to BIG-IP versions 17.5.1, 17.1.3, 16.1.6.1, or 15.1.10.8 to address this vulnerability. For more information about F5 hotfixes and point releases, refer to the F5 BIG-IP hotfix and point release matrix.