{"id":39360,"date":"2025-05-18T08:25:34","date_gmt":"2025-05-18T08:25:34","guid":{"rendered":""},"modified":"2025-09-27T07:38:53","modified_gmt":"2025-09-27T13:38:53","slug":"cve-2025-36546-ssh-key-based-authentication-vulnerability-in-f5os-systems","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-36546-ssh-key-based-authentication-vulnerability-in-f5os-systems\/","title":{"rendered":"CVE-2025-36546: SSH Key-Based Authentication Vulnerability in F5OS Systems<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

Today, we are addressing a noteworthy vulnerability – CVE-2025-36546, which could potentially compromise F5OS systems and lead to data leakage. This vulnerability affects F5OS systems where the root user has configured the system for SSH key-based authentication and enabled Appliance Mode. The issue lies in the fact that even after enabling Appliance Mode, the system continues to allow<\/a> access through SSH key-based authentication. This could pose a serious<\/a> threat if an attacker obtains the root user’s SSH private key.
\nThis vulnerability is significant, considering the critical role that F5OS systems play in managing<\/a> network traffic and ensuring optimal application performance. It is crucial for organizations using F5OS to be aware of this vulnerability and implement appropriate mitigation measures to safeguard their systems<\/a>.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-36546
\nSeverity: High (8.1 CVSS Score)
\nAttack Vector: Network
\nPrivileges Required: High (Root access<\/a>)
\nUser Interaction: None
\nImpact: System compromise and potential<\/a> data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n