{"id":"CVE-2025-54547","state":"PUBLISHED","title":"On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a configured session timeout expired","description":"On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a configured session timeout expired","publishedAt":"2025-10-29T22:45:53.499Z","updatedAt":"2025-10-30T14:15:29.632Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","source":"Arista"},"assigner":"Arista","products":["Arista Networks DANZ Monitoring Fabric"],"affected":[{"vendor":"Arista Networks","product":"DANZ Monitoring Fabric","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"DMF 8.6.1","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"DMF 8.5.2","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CCF 6.2.4","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CVA 7.0","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MCD 2.4.0","versionType":"custom"}],"platforms":["DCA-350E-CV","DCA-300-CV","DCA-250-CV","DCA-200-CV","Arista Converged Cloud Fabric","Arista DANZ Monitoring Fabric","Arista Multi-Cloud Director"]}],"references":["https://www.arista.com/en/support/advisories-notices/security-advisory/22538-security-advisory-0124"],"weaknesses":["CWE-613"],"ingestedAt":"2026-10-29T20:09:31.862Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/54xxx/CVE-2025-54547.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-54547","state":"PUBLISHED","datePublished":"2025-10-29T22:45:53.499Z","dateUpdated":"2025-10-30T14:15:29.632Z","assignerShortName":"Arista","assignerOrgId":"c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7","dateReserved":"2025-07-24T18:47:24.387Z"},"containers":{"cna":{"title":"On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a configured session timeout expired","descriptions":[{"lang":"en","value":"On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a configured session timeout expired"}],"affected":[{"vendor":"Arista Networks","product":"DANZ Monitoring Fabric","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"DMF 8.6.1","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"DMF 8.5.2","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CCF 6.2.4","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CVA 7.0","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MCD 2.4.0","versionType":"custom"}],"platforms":["DCA-350E-CV","DCA-300-CV","DCA-250-CV","DCA-200-CV","Arista Converged Cloud Fabric","Arista DANZ Monitoring Fabric","Arista Multi-Cloud Director"]}],"references":[{"url":"https://www.arista.com/en/support/advisories-notices/security-advisory/22538-security-advisory-0124"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-613","description":"CWE-613","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Arista","orgId":"c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7","dateUpdated":"2025-10-29T22:45:53.499Z"},"configurations":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"The following conditions must be met: The connecting SSH client must be configured to allow multiple sessions to be multiplexed onto the same SSH Connection (e.g., via the OpenSSH ControlMaster auto configuration or other equivalent configurations); The ControlMaster connection must be active; The attacker must have access to the ControlMaster socket on the client.
"}],"value":"The following conditions must be met: The connecting SSH client must be configured to allow multiple sessions to be multiplexed onto the same SSH Connection (e.g., via the OpenSSH ControlMaster auto configuration or other equivalent configurations); The ControlMaster connection must be active; The attacker must have access to the ControlMaster socket on the client."}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:0:*:dca-350e-cv:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:0:*:dca-300-cv:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:0:*:dca-250-cv:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:0:*:dca-200-cv:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:0:*:arista_converged_cloud_fabric:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:0:*:arista_danz_monitoring_fabric:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:0:*:arista_multi-cloud_director:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-350e-cv:*:*:*:*:*","versionEndIncluding":"dmf_8.6.1","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-300-cv:*:*:*:*:*","versionEndIncluding":"dmf_8.6.1","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-250-cv:*:*:*:*:*","versionEndIncluding":"dmf_8.6.1","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-200-cv:*:*:*:*:*","versionEndIncluding":"dmf_8.6.1","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_converged_cloud_fabric:*:*:*:*:*","versionEndIncluding":"dmf_8.6.1","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_danz_monitoring_fabric:*:*:*:*:*","versionEndIncluding":"dmf_8.6.1","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_multi-cloud_director:*:*:*:*:*","versionEndIncluding":"dmf_8.6.1","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-350e-cv:*:*:*:*:*","versionEndIncluding":"dmf_8.5.2","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-300-cv:*:*:*:*:*","versionEndIncluding":"dmf_8.5.2","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-250-cv:*:*:*:*:*","versionEndIncluding":"dmf_8.5.2","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-200-cv:*:*:*:*:*","versionEndIncluding":"dmf_8.5.2","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_converged_cloud_fabric:*:*:*:*:*","versionEndIncluding":"dmf_8.5.2","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_danz_monitoring_fabric:*:*:*:*:*","versionEndIncluding":"dmf_8.5.2","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_multi-cloud_director:*:*:*:*:*","versionEndIncluding":"dmf_8.5.2","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-350e-cv:*:*:*:*:*","versionEndIncluding":"ccf_6.2.4","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-300-cv:*:*:*:*:*","versionEndIncluding":"ccf_6.2.4","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-250-cv:*:*:*:*:*","versionEndIncluding":"ccf_6.2.4","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-200-cv:*:*:*:*:*","versionEndIncluding":"ccf_6.2.4","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_converged_cloud_fabric:*:*:*:*:*","versionEndIncluding":"ccf_6.2.4","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_danz_monitoring_fabric:*:*:*:*:*","versionEndIncluding":"ccf_6.2.4","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_multi-cloud_director:*:*:*:*:*","versionEndIncluding":"ccf_6.2.4","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-350e-cv:*:*:*:*:*","versionEndIncluding":"cva_7.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-300-cv:*:*:*:*:*","versionEndIncluding":"cva_7.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-250-cv:*:*:*:*:*","versionEndIncluding":"cva_7.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-200-cv:*:*:*:*:*","versionEndIncluding":"cva_7.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_converged_cloud_fabric:*:*:*:*:*","versionEndIncluding":"cva_7.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_danz_monitoring_fabric:*:*:*:*:*","versionEndIncluding":"cva_7.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_multi-cloud_director:*:*:*:*:*","versionEndIncluding":"cva_7.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-350e-cv:*:*:*:*:*","versionEndIncluding":"mcd_2.4.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-300-cv:*:*:*:*:*","versionEndIncluding":"mcd_2.4.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-250-cv:*:*:*:*:*","versionEndIncluding":"mcd_2.4.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-200-cv:*:*:*:*:*","versionEndIncluding":"mcd_2.4.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_converged_cloud_fabric:*:*:*:*:*","versionEndIncluding":"mcd_2.4.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_danz_monitoring_fabric:*:*:*:*:*","versionEndIncluding":"mcd_2.4.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_multi-cloud_director:*:*:*:*:*","versionEndIncluding":"mcd_2.4.0","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"datePublic":"2025-10-22T15:00:00.000Z","impacts":[{"capecId":"CAPEC-60","descriptions":[{"lang":"en","value":"CAPEC-60 Reusing Session IDs (aka Session Replay)"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"

The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Arista recommends customers move to the latest version of each release that contains all the fixes listed below. Fixed versions are as follows for each product:

 
Danz Monitoring Fabric
 
Converged Cloud Fabric
 
Cloud Vision Appliance
 
Multi-Cloud Director
"}],"value":"The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Arista recommends customers move to the latest version of each release that contains all the fixes listed below. Fixed versions are as follows for each product:\n\n \n\nDanz Monitoring Fabric\n\n * DMF 8.7.1 and later releases in the 8.7.x train\n * DMF 8.6.2 and later releases in the 8.6.x train\n * DMF 8.5.3 and later releases in the 8.5.x train\n * DMF 8.4.6 and later releases in the 8.4.x train.\n\n\n \n\nConverged Cloud Fabric\n\n * CCF 6.2.5 and later releases in the 6.2.x train\n\n\n \n\nCloud Vision Appliance\n\n * CVA 7.1.0 and later releases in the CVA 7.x train\n\n\n \n\nMulti-Cloud Director\n\n * MCD 2.4.1 and later releases in the 2.4.x train"}],"source":{"advisory":"124","defect":["BUG1084527","BSC-20748"],"discovery":"INTERNAL"},"workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"No known mitigation
"}],"value":"No known mitigation"}],"x_generator":{"engine":"Vulnogram 0.4.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-10-30T14:13:17.500900Z","id":"CVE-2025-54547","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-613","type":"CWE","lang":"en","description":"CWE-613 Insufficient Session Expiration"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-10-30T14:15:29.632Z"}}]}}}