PT-2025-20313 · Arista · Arista Eos

Published 2025-05-07 · Updated 2025-05-08 · CVE-2025-0936

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Arista EOS (affected versions not specified)

Description On affected platforms running Arista EOS with a gNMI transport enabled, running the gNOI File TransferToRemote RPC with credentials for a remote server may cause these remote-server credentials to be logged or accounted on the local EOS device or possibly on other remote accounting servers (i.e. TACACS, RADIUS, etc).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-256

Related Identifiers

CVE-2025-0936

Affected Products

Arista Eos

References · 7

• 🔥 https://arista.com/en/support/advisories-notices/security-advisory/21394-security-advisory-0117 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-0936 · Security Note
• https://t.me/cvenotify/121332 · Telegram Post
• https://t.me/cvenotify/121305 · Telegram Post
• https://t.me/cvedetector/24785 · Telegram Post
• https://t.me/cvetracker/23316 · Telegram Post
• https://twitter.com/CVEnew/status/1920256168242332031 · Twitter Post