BaseFortify

Publication date: 2025-10-23

Last updated on: 2025-10-27

Assigner: Arista Networks, Inc.

Description

Captive Portal can allow authentication bypass

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-23

Last Modified

2025-10-27

Generated

2026-07-06

AI Q&A

2025-10-23

EPSS Evaluated

2026-07-05

NVD

CVE-2025-6979

EUVD

EUVD-2025-35728

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

This vulnerability involves a Captive Portal that can allow authentication bypass, meaning an attacker could potentially access the network or services without proper authentication.

Impact Analysis

The vulnerability can have a high impact by allowing unauthorized access, which could lead to compromise of confidentiality, integrity, and availability of the affected system or network.

Hi! I’m here to help you understand CVE-2025-6979. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70