BaseFortify

Publication date: 2025-10-29

Last updated on: 2025-10-30

Assigner: Arista Networks, Inc.

Description

On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a configured session timeout expired

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-29

Last Modified

2025-10-30

Generated

2026-07-06

AI Q&A

2025-10-30

EPSS Evaluated

2026-07-05

NVD

CVE-2025-54547

Affected Vendors & Products

Vendor	Product	Version / Range
arista	converged_cloud_fabric	*
arista	multi-cloud_director	*
arista	danz_monitoring_fabric	*
arista	cloudvision_appliance	7.0.x

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-613	According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

Attack-Flow Graph

Executive Summary

This vulnerability occurs on affected platforms when SSH session multiplexing is configured on the client side. It allows SSH sessions, such as scp or sftp, that are multiplexed onto the same channel to continue performing file-system operations even after the configured session timeout has expired.

Impact Analysis

The vulnerability can allow unauthorized file-system operations to continue after a session timeout, potentially leading to unauthorized access or modification of files. This could result in data leakage, data corruption, or unauthorized changes to the system.

Hi! I’m here to help you understand CVE-2025-54547. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70