CVE-2025-58424: 
F5 BIG-IP Virtual Edition vulnerability analysis and mitigation

CVE-2025-58424 affects BIG-IP systems, discovered and disclosed on October 15, 2025. The vulnerability impacts multiple BIG-IP components including Access Policy Manager, Advanced Firewall Manager, SSL Orchestrator, and other modules across versions 15.1.0-15.1.10.8, 16.1.0-16.1.6, and 17.1.0-17.1.2 (NVD).

The vulnerability allows undisclosed traffic to cause data corruption and unauthorized data modification in protocols that lack message integrity protection. It has been assigned a CVSS v4.0 base score of 6.3 (Medium) with vector CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N, and a CVSS v3.1 base score of 5.3 (Medium). The vulnerability is classified under CWE-340 (Generation of Predictable Numbers or Identifiers) (NVD).

The vulnerability primarily affects system integrity, allowing unauthorized data modification in protocols without message integrity protection. The CVSS scores indicate a medium severity impact, with the potential for data corruption in affected systems (NVD).

F5 has documented this vulnerability and provided information in their security advisory. Software versions that have reached End of Technical Support (EoTS) are not evaluated for this vulnerability (NVD, F5 Advisory).