CVE-2025-54547CWE-613

CVE-2025-54547

Medium · published October 30, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
1.4
In the wild
Unconfirmed
What it is

On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a configured session timeout expired

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00114 · 1.4th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2025-10-30T03:16Z
References (1)
https://www.arista.com/en/support/advisories-notices/security-advisory/22538-security-advisory-0124 · [email protected]
EPSS history
Timeline
  • 29 OCT 22:45Z
    On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a configured session timeout expired
    cvelistv5