CVE-2025-53860: F5OS-A FIPS HSM vulnerability
A vulnerability exists in F5OS-A software that allows a highly privileged authenticated attacker to access sensitive FIPS hardware security module (HSM) information on F5 rSeries systems.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.8.31.5.3
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53860?
CVE-2025-53860 is a high severity vulnerability that allows unauthorized access to sensitive HSM information.
How do I fix CVE-2025-53860?
To fix CVE-2025-53860, upgrade to F5OS-A version 1.8.31.5.3 or later.
What systems are affected by CVE-2025-53860?
CVE-2025-53860 affects F5 rSeries systems running F5OS-A versions 1.5.1 to 1.8.0.
Who can exploit the CVE-2025-53860 vulnerability?
CVE-2025-53860 can be exploited by a highly privileged authenticated attacker with access to the system.
What type of information can be accessed through CVE-2025-53860?
CVE-2025-53860 allows attackers to access sensitive FIPS hardware security module (HSM) information.