CVE-2025-48500— BIG-IP APM VPN web client for macOS vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-48500
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
BIG-IP APM VPN web client for macOS vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
缺失完整性检查支持
Source: NVD (National Vulnerability Database)
Vulnerability Title
F5 BIG-IP Edge Client 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
F5 BIG-IP Edge Client是美国F5公司的一个安全远程访问客户端软件。 F5 BIG-IP Edge Client存在安全漏洞，该漏洞源于缺少文件完整性检查，可能导致本地攻击者替换恶意安装包。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| F5 | BIG-IP Edge Client | 7.2.4 ~ 7.2.5.3 | - | |
| F5 | BIG-IP | 17.5.0 ~ * | - |
II. Public POCs for CVE-2025-48500
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-48500
请登录查看更多情报信息。
Same Patch Batch · F5 · 2025-08-13 · 6 CVEs total
| CVE-2025-46405 | 7.5 HIGH | BIG-IP APM vulnerability |
| CVE-2025-52585 | 7.5 HIGH | BIG-IP Client SSL profile vulnerability |
| CVE-2025-54809 | 7.4 HIGH | F5 Access for Android vulnerability |
| CVE-2025-54500 | 5.3 MEDIUM | HTTP/2 Vulnerability |
| CVE-2025-53859 | 3.7 LOW | NGINX ngx_mail_smtp_module vulnerability |
IV. Related Vulnerabilities
Same product: BIG-IP Edge Client
Same weakness: CWE-353
- CVE-2026-42428
OpenClaw < 2026.4.8 - Missing Integrity Verification in Pack - CVE-2026-3856
IBM Db2 Recovery Expert Missing Integrity Check - CVE-2025-10010
Integrity Validation Bypass in CryptoPro Secure Disk for Bit - CVE-2025-15364
Download Manager <= 3.3.40 - Unauthenticated Limited Privile - CVE-2026-21437
eopkg vulnerable to package file list integrity bypass
V. Comments for CVE-2025-48500
No comments yet