Skip to content
OpenAdvisories
High · 7.7 CVE-2025-1259 EUVD-2025-7379GHSA-wf49-mp4g-xcg4

On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected.

Published Mar 4, 2025 · Updated Mar 4, 2025 · Assigned by Arista

Vendor: Arista Networks Product: EOS Category: Network devices

Description

On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected. This issue can result in users retrieving data that should not have been available

Affected products

VendorProductAffectedFixed
Arista Networks EOS 4.33.0 – ≤ 4.33.1, 4.32.0 – ≤ 4.32.3, 4.31.0 – ≤ 4.31.5, 4.30.0 – ≤ 4.30.8, 4.29.0 – ≤ 4.29.9, 4.28.0 – ≤ 4.28.12 —

Advisories 1

References