cve/2025/CVE-2025-31644.md

CVE-2025-31644

Description

When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attacker with administrator role privileges to execute arbitrary system commands. A successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

POC

Reference

No PoCs from references.

Github

• https://github.com/PuddinCat/GithubRepoSpider
• https://github.com/mbadanoiu/CVE-2025-31644
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/plzheheplztrying/cve_monitor
• https://github.com/tanjiti/sec_profile
• https://github.com/zxarj/wxvl