Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-54549 EUVD-2025-36882GHSA-xhhh-442h-j6wm

Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO

Published Oct 29, 2025 · Updated Oct 30, 2025 · Assigned by Arista

Vendor: Arista Networks Product: DANZ Monitoring Fabric Category: Network devices

Description

Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO

Affected products

VendorProductAffectedFixed
Arista Networks DANZ Monitoring Fabric ≤ DMF 8.6.1, ≤ DMF 8.5.2, ≤ CCF 6.2.4, ≤ CVA 7.0, ≤ MCD 2.4.0 —

Advisories 1

References