F5OS Privilege Escalation Vulnerability

A vulnerability in F5OS-A and F5OS-C systems may allow an authenticated attacker with local access to escalate privileges. This could enable the attacker to execute arbitrary system commands with higher privileges, bypassing Appliance mode security. The issue is confined to the control plane, with no data plane exposure.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an authenticated user to execute commands with elevated rights on the affected system.

Remediation

Users can upgrade to F5OS-A 1.8.3 or 1.5.4, or F5OS-C 1.8.2 or 1.6.4. For more information about F5OS versions, refer to the F5OS versioning article K51812227.