Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2025-54549

Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Arista

Description

Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Arista Networks DANZ Monitoring Fabric

Default version status: unaffected

  • 0affected
  • 0 to ≤ DMF 8.6.1affected
  • 0 to ≤ DMF 8.5.2affected
  • 0 to ≤ CCF 6.2.4affected
  • 0 to ≤ CVA 7.0affected
  • 0 to ≤ MCD 2.4.0affected

References