CVE-2025-54547
BaseFortify
Publication date: 2025-10-29
Last updated on: 2025-10-30
Assigner: Arista Networks, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| arista | converged_cloud_fabric | * |
| arista | multi-cloud_director | * |
| arista | danz_monitoring_fabric | * |
| arista | cloudvision_appliance | 7.0.x |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-613 | According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization." |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability occurs on affected platforms when SSH session multiplexing is configured on the client side. It allows SSH sessions, such as scp or sftp, that are multiplexed onto the same channel to continue performing file-system operations even after the configured session timeout has expired.
How can this vulnerability impact me? :
The vulnerability can allow unauthorized file-system operations to continue after a session timeout, potentially leading to unauthorized access or modification of files. This could result in data leakage, data corruption, or unauthorized changes to the system.