CNNVD-202510-3931 Information

CNNVD ID

CNNVD-202510-3931

CVE-2025-54549

  • CNNVD Published: 2025-10-29

Description (Chinese)

Arista DANZ Monitoring Fabric是美国Arista公司的一个流量监控、安全、性能分析平台。 Arista DANZ Monitoring Fabric存在安全漏洞,该漏洞源于可绕过升级映像的加密验证,可能导致特制文件被植入升级ISO。

Description (English)

Arista DANZ Monitoring Fabric is a traffic monitoring, safety and performance analysis platform for the American company Arista. There is a security loophole in Arista DANZ Monitoring Fabric, which stems from encrypted authentication that circumvents an upgraded image and may lead to the implantation of a special file into an upgraded ISO.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Arista

Published

2025-10-29

Last Modified

2026-02-24

References

https://www.arista.com/en/support/advisories-notices/security-advisory/22538-security-advisory-0124

Patch

https://www.arista.com/en/support/advisories-notices/security-advisory/22538-security-advisory-0124

Share on: