Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-0936 EUVD-2025-13950GHSA-gpmf-hwm2-x2mq

On affected platforms running Arista EOS with a gNMI transport enabled, running the gNOI File TransferToRemote RPC with credentials for a remote server may cause these remote-server credentials to be logged or accounted on the local EOS device or possibly

Published May 7, 2025 · Updated May 8, 2025 · Assigned by Arista

Vendor: Arista Networks Product: EOS Category: Network devices

Description

On affected platforms running Arista EOS with a gNMI transport enabled, running the gNOI File TransferToRemote RPC with credentials for a remote server may cause these remote-server credentials to be logged or accounted on the local EOS device or possibly on other remote accounting servers (i.e. TACACS, RADIUS, etc).

Affected products

VendorProductAffectedFixed
Arista Networks EOS 4.33.0 – ≤ 4.33.1, 4.32.0 – ≤ 4.32.3M, 4.31.0 – ≤ 4.31.5M, 4.30.1F – ≤ 4.30.9M —

Advisories 1

References