CVE-2025-1260

critical · 9.1

On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected. This issue can result in unexpected configuration/operations being applied to the switch.

9.1

CVSS

0.4%

EPSS (exploit prob.)

37th

EPSS percentile

2025-03-04

Published

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-284

References

https://www.arista.com/en/support/advisories-notices/security-advisory/21098-security-advisory-0111

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-1260