F5 Product Security Update Advisory (CVE-2025-20029)

Overview

We have released security updates to fix vulnerabilities in F5 products. Users of affected products are advised to update to the latest version.
 

 

Affected Products

 

CVE-2025-20029

BIG-IP Versions: 17.1.0 through 17.1.2 (inclusive)
BIG-IP Versions: 16.1.0 through 16.1.5 (inclusive)
BIG-IP Versions: 15.1.0 through 15.1.10 (inclusive)

 

 

Resolved Vulnerabilities

Instruction Injection Vulnerability (CVE-2025-20029)

 

 

Vulnerability Patches

Vulnerability Patches have been made available in the latest update. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
 

 

 

CVE-2025-20029

BIG-IP Version: 17.1.2.1
BIG-IP Version: 16.1.5.2
BIG-IP version: 15.1.10.6

 

 

References

[1] K000148587: BIG-IP iControl REST and tmsh vulnerability CVE-2025-20029
https://my.f5.com/manage/s/article/K000148587