F5OS Privilege Escalation Vulnerability

A vulnerability in F5OS-A and F5OS-C systems may allow an authenticated attacker with local access to escalate privileges. This could enable the attacker to execute arbitrary system commands with higher privileges, bypassing Appliance mode security. The issue is confined to the control plane, with no data plane exposure.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing local users to execute commands with elevated rights, potentially crossing critical security boundaries.

Remediation

Users can upgrade to F5OS-A version 1.8.3 or 1.5.4, or F5OS-C version 1.8.2 or 1.6.4. For more information about F5OS versions, refer to the F5OS vulnerability response policy.