CVE-2025-23239

🗓️ 05 Feb 2025 17:31:03Reported by f5Type

Authenticated remote command injection vulnerability in BIG-IP iControl REST endpoint allows exploits.

Reporter	Title	Published	Views	Family All 16
ATTACKERKB	CVE-2025-23239	5 Feb 202518:15	–	attackerkb
BDU FSTEC	The vulnerability of the iControl REST component of the access control and remote authentication solution for BIG-IP allows a perpetrator to inject arbitrary commands.	9 May 202500:00	–	bdu_fstec
Circl	CVE-2025-23239	5 Feb 202518:07	–	circl
CNNVD	F5 BIG-IP 命令注入漏洞	5 Feb 202500:00	–	cnnvd
CNVD	F5 BIG-IP Remote Command Injection Vulnerability	18 Feb 202500:00	–	cnvd
Cvelist	CVE-2025-23239 BIG-IP iControl REST vulnerability	5 Feb 202517:31	–	cvelist
EUVD	EUVD-2025-3155	3 Oct 202520:07	–	euvd
F5 Networks	K000138757: BIG-IP iControl REST vulnerability CVE-2025-23239	5 Feb 202513:22	–	f5
F5 Networks	K000149540: Quarterly Security Notification (February 2025)	5 Feb 202514:41	–	f5
Tenable Nessus	F5 Networks BIG-IP : BIG-IP iControl REST vulnerability (K000138757)	5 Feb 202500:00	–	nessus

NVD

Node

f5 big-ip_access_policy_managerMatch17.1.1

f5 big-ip_advanced_firewall_managerMatch17.1.1

f5 big-ip_analyticsMatch17.1.1

f5 big-ip_application_acceleration_managerMatch17.1.1

f5 big-ip_application_security_managerMatch17.1.1

f5 big-ip_domain_name_systemMatch17.1.1

f5 big-ip_fraud_protection_serviceMatch17.1.1

f5 big-ip_global_traffic_managerMatch17.1.1

f5 big-ip_link_controllerMatch17.1.1

f5 big-ip_local_traffic_managerMatch17.1.1

f5 big-ip_policy_enforcement_managerMatch17.1.1

[
  {
    "vendor": "F5",
    "product": "BIG-IP",
    "modules": [
      "All Modules"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "17.1.1",
        "lessThan": "17.1.2",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "16.1.0",
        "lessThan": "*",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "15.1.0",
        "lessThan": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
my	www.my.f5.com/manage/s/article/K000138757

17 Jun 2026 08:52Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.18.7

CVSS 48.5

EPSS0.00721

SSVC

CWE-77