CVE-2025-60013

EIP tracks 1 public exploit for CVE-2025-60013. PoCs published by demining.

AI-analyzed exploit summary The repository contains a detailed writeup describing CVE-2025-60013, a vulnerability in F5OS-A FIPS HSM initialization that allows command injection via shell metacharacters in passwords, combined with the Scalar Venom Attack to recover Bitcoin private keys. No exploit code is present, only documentation and references to external tutorials.

When a highly-privileged, authenticated attacker attempts to initialize the rSeries FIPS module using a password with special shell metacharacters, arbitrary system commands may be executed, and the FIPS hardware security module (HSM) may fail to initialize. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.