Detections
Analytics
CVE-2025-61958
high
Description
A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administrator role to bypass tmsh restrictions and gain access to a bash shell. For BIG-IP systems running in Appliance mode, a successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
References
Details
Published: 2025-10-15
Updated: 2025-10-16
Risk Information
CVSS v2
Base Score: 7.7
Vector: CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:N
Severity: High
CVSS v3
Base Score: 8.7
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Severity: High
CVSS v4
Base Score: 8.5
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Severity: High
EPSS
EPSS: 0.00051
Vulnerability Watch
Tenable Research has classified this CVE under the following Vulnerability Watch classification, which includes active and historical (inactive) classifications. You can learn more about these classifications on our blog.
Vulnerability Being Monitored