CVE-2025-1259CWE-284

On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected.

High · published March 4, 2025

CVSS v3.1
7.7
EPSS
0%
Percentile
27.4
In the wild
Unconfirmed
What it is

On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected. This issue can result in users retrieving data that should not have been available

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00350 · 27.4th percentile
Weakness
CWE-284 · Improper Access Control
Published
2025-03-04T19:44Z
EPSS history
Timeline
  • 04 MAR 19:44Z
    On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected.
    cvelistv5