PT-2025-43545 · Unknown · Diagnostics

Published 2025-10-23 · Updated 2026-02-08 · CVE-2025-6978

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Arista NG Firewall (affected versions not specified)

Description This issue is a diagnostics command injection that could lead to arbitrary command execution with root privileges. Successful exploitation allows an attacker to execute commands under the security context of the root user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-6978

ZDI-25-1020

Affected Products

Diagnostics

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2025-6978 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-25-1020 · Security Note
• https://twitter.com/cracbot/status/1983126661039304898 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1qz67mk/top_10_trending_cves_08022026 · Reddit Post
• https://reddit.com/r/CVEWatch/comments/1qyb0pu/top_10_trending_cves_07022026 · Reddit Post
• https://reddit.com/r/SecOpsDaily/comments/1qwqu2d/cve20256978_arbitrary_code_execution_in_the · Reddit Post
• https://twitter.com/autumn_good_35/status/2019589122739130778 · Twitter Post
• https://t.me/pentestingnews/72917 · Telegram Post
• https://t.me/CVEtracker/35602 · Telegram Post
• https://https//www.arista.com/en/support/advisories-notices/security-advisory/22535-security-advisory-0123 · Note
• https://twitter.com/thezdi/status/2019452774740562311 · Twitter Post
• https://reddit.com/r/SecOpsDaily/comments/1qwu8qg/secopsdaily_20260205_roundup · Reddit Post
• https://twitter.com/f1tym1/status/2019458344734302343 · Twitter Post
• https://twitter.com/CVEnew/status/1981438891157504273 · Twitter Post