Skip to content
OpenAdvisories
Critical · 9.1 CVE-2025-1260 EUVD-2025-7380GHSA-qphr-fcm6-q558

On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected.

Published Mar 4, 2025 · Updated Mar 4, 2025 · Assigned by Arista

Vendor: Arista Networks Product: EOS Category: Network devices

Description

On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected. This issue can result in unexpected configuration/operations being applied to the switch.

Affected products

VendorProductAffectedFixed
Arista Networks EOS 4.33.0 – ≤ 4.33.1, 4.32.0 – ≤ 4.32.3, 4.31.0 – ≤ 4.31.5, 4.30.0 – ≤ 4.30.8, 4.29.0 – ≤ 4.29.9, 4.28.0 – ≤ 4.28.12 —

Advisories 1

References