External Port Exposure in F5OS-A Software by F5 Networks
CVE-2022-25990

5.3MEDIUM

Key Information:

Vendor

F5
Status
F5os-a
Vendor
CVE Published:
4 May 2022

What is CVE-2022-25990?

F5 Networks has identified a vulnerability in F5OS-A software versions 1.0.x before 1.0.1 where certain registry ports are exposed externally. This poses a risk, as unauthorized access may occur if these ports are misconfigured or left unprotected. It's crucial for organizations running this software version to assess their security configurations and apply the necessary updates to mitigate potential risks.

Affected Version(s)

F5OS-A 1.0.x < 1.0.1

References

https://support.f5.com/csp/article/K44233515
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.