BaseFortify

Publication date: 2025-10-29

Last updated on: 2025-10-30

Assigner: Arista Networks, Inc.

Description

On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-29

Last Modified

2025-10-30

Generated

2026-07-07

AI Q&A

2025-10-30

EPSS Evaluated

2026-07-05

NVD

CVE-2025-54545

Affected Vendors & Products

Vendor	Product	Version / Range
arista	converged_cloud_fabric	*
arista	multi-cloud_director	*
arista	danz_monitoring_fabric	*
arista	cloudvision_appliance	From 7.0.x (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-732	The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Attack-Flow Graph

Executive Summary

This vulnerability allows a restricted user on affected platforms to escape the command-line interface (CLI) sandbox and gain access to the system shell, which can lead to privilege escalation.

Impact Analysis

The vulnerability can lead to unauthorized privilege escalation, allowing a restricted user to gain higher-level access to the system, potentially compromising system integrity, confidentiality, and availability.

Hi! I’m here to help you understand CVE-2025-54545. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70