Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-54547 EUVD-2025-36726GHSA-c4hj-8xp2-799f

On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a configured session timeout expired

Published Oct 29, 2025 · Updated Oct 30, 2025 · Assigned by Arista

Vendor: Arista Networks Product: DANZ Monitoring Fabric Category: Network devices

Description

On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a configured session timeout expired

Affected products

VendorProductAffectedFixed
Arista Networks DANZ Monitoring Fabric ≤ DMF 8.6.1, ≤ DMF 8.5.2, ≤ CCF 6.2.4, ≤ CVA 7.0, ≤ MCD 2.4.0 —

Advisories 1

References