CNNVD-202510-3934 Information

CNNVD ID

CNNVD-202510-3934

CVE-2025-54545

  • CNNVD Published: 2025-10-29

Description (Chinese)

Arista DANZ Monitoring Fabric是美国Arista公司的一个流量监控、安全、性能分析平台。 Arista DANZ Monitoring Fabric存在安全漏洞,该漏洞源于受限用户可突破CLI沙箱限制进入系统shell,可能导致权限提升。

Description (English)

Arista DANZ Monitoring Fabric is a traffic monitoring, safety and performance analysis platform for the American company Arista. There is a security loophole in Arista DANZ Monitoring Fabric, which stems from the possibility that restricted users can break the CLI sandbox to restrict access to the system shell, which may lead to increased access.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Arista

Published

2025-10-29

Last Modified

2026-02-24

References

https://www.arista.com/en/support/advisories-notices/security-advisory/22538-security-advisory-0124

Patch

https://www.arista.com/en/support/advisories-notices/security-advisory/22538-security-advisory-0124

Share on: