{"id":"CVE-2025-54549","state":"PUBLISHED","title":"Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO","description":"Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO","publishedAt":"2025-10-29T22:55:54.433Z","updatedAt":"2025-10-30T14:12:59.838Z","severity":{"score":5.9,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N","source":"Arista"},"assigner":"Arista","products":["Arista Networks DANZ Monitoring Fabric"],"affected":[{"vendor":"Arista Networks","product":"DANZ Monitoring Fabric","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"DMF 8.6.1","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"DMF 8.5.2","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CCF 6.2.4","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CVA 7.0","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MCD 2.4.0","versionType":"custom"}],"platforms":["DCA-350E-CV","DCA-300-CV","DCA-250-CV","DCA-200-CV","Arista Converged Cloud Fabric","Arista DANZ Monitoring Fabric","Arista Multi-Cloud Director"]}],"references":["https://www.arista.com/en/support/advisories-notices/security-advisory/22538-security-advisory-0124"],"weaknesses":["CWE-347"],"ingestedAt":"2026-10-29T20:09:31.862Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/54xxx/CVE-2025-54549.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-54549","state":"PUBLISHED","datePublished":"2025-10-29T22:55:54.433Z","dateUpdated":"2025-10-30T14:12:59.838Z","assignerShortName":"Arista","assignerOrgId":"c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7","dateReserved":"2025-07-24T18:47:24.387Z"},"containers":{"cna":{"title":"Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO","descriptions":[{"lang":"en","value":"Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO"}],"affected":[{"vendor":"Arista Networks","product":"DANZ Monitoring Fabric","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"DMF 8.6.1","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"DMF 8.5.2","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CCF 6.2.4","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CVA 7.0","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MCD 2.4.0","versionType":"custom"}],"platforms":["DCA-350E-CV","DCA-300-CV","DCA-250-CV","DCA-200-CV","Arista Converged Cloud Fabric","Arista DANZ Monitoring Fabric","Arista Multi-Cloud Director"]}],"references":[{"url":"https://www.arista.com/en/support/advisories-notices/security-advisory/22538-security-advisory-0124"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-347","description":"CWE-347 Improper Verification of Cryptographic Signature","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Arista","orgId":"c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7","dateUpdated":"2025-10-29T22:55:54.433Z"},"configurations":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"The operator must attempt to install a tampered software upgrade image.
"}],"value":"The operator must attempt to install a tampered software upgrade image."}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:0:*:dca-350e-cv:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:0:*:dca-300-cv:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:0:*:dca-250-cv:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:0:*:dca-200-cv:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:0:*:arista_converged_cloud_fabric:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:0:*:arista_danz_monitoring_fabric:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:0:*:arista_multi-cloud_director:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-350e-cv:*:*:*:*:*","versionEndIncluding":"dmf_8.6.1","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-300-cv:*:*:*:*:*","versionEndIncluding":"dmf_8.6.1","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-250-cv:*:*:*:*:*","versionEndIncluding":"dmf_8.6.1","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-200-cv:*:*:*:*:*","versionEndIncluding":"dmf_8.6.1","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_converged_cloud_fabric:*:*:*:*:*","versionEndIncluding":"dmf_8.6.1","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_danz_monitoring_fabric:*:*:*:*:*","versionEndIncluding":"dmf_8.6.1","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_multi-cloud_director:*:*:*:*:*","versionEndIncluding":"dmf_8.6.1","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-350e-cv:*:*:*:*:*","versionEndIncluding":"dmf_8.5.2","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-300-cv:*:*:*:*:*","versionEndIncluding":"dmf_8.5.2","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-250-cv:*:*:*:*:*","versionEndIncluding":"dmf_8.5.2","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-200-cv:*:*:*:*:*","versionEndIncluding":"dmf_8.5.2","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_converged_cloud_fabric:*:*:*:*:*","versionEndIncluding":"dmf_8.5.2","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_danz_monitoring_fabric:*:*:*:*:*","versionEndIncluding":"dmf_8.5.2","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_multi-cloud_director:*:*:*:*:*","versionEndIncluding":"dmf_8.5.2","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-350e-cv:*:*:*:*:*","versionEndIncluding":"ccf_6.2.4","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-300-cv:*:*:*:*:*","versionEndIncluding":"ccf_6.2.4","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-250-cv:*:*:*:*:*","versionEndIncluding":"ccf_6.2.4","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-200-cv:*:*:*:*:*","versionEndIncluding":"ccf_6.2.4","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_converged_cloud_fabric:*:*:*:*:*","versionEndIncluding":"ccf_6.2.4","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_danz_monitoring_fabric:*:*:*:*:*","versionEndIncluding":"ccf_6.2.4","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_multi-cloud_director:*:*:*:*:*","versionEndIncluding":"ccf_6.2.4","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-350e-cv:*:*:*:*:*","versionEndIncluding":"cva_7.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-300-cv:*:*:*:*:*","versionEndIncluding":"cva_7.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-250-cv:*:*:*:*:*","versionEndIncluding":"cva_7.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-200-cv:*:*:*:*:*","versionEndIncluding":"cva_7.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_converged_cloud_fabric:*:*:*:*:*","versionEndIncluding":"cva_7.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_danz_monitoring_fabric:*:*:*:*:*","versionEndIncluding":"cva_7.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_multi-cloud_director:*:*:*:*:*","versionEndIncluding":"cva_7.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-350e-cv:*:*:*:*:*","versionEndIncluding":"mcd_2.4.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-300-cv:*:*:*:*:*","versionEndIncluding":"mcd_2.4.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-250-cv:*:*:*:*:*","versionEndIncluding":"mcd_2.4.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:dca-200-cv:*:*:*:*:*","versionEndIncluding":"mcd_2.4.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_converged_cloud_fabric:*:*:*:*:*","versionEndIncluding":"mcd_2.4.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_danz_monitoring_fabric:*:*:*:*:*","versionEndIncluding":"mcd_2.4.0","versionStartIncluding":"0","vulnerable":true},{"criteria":"cpe:2.3:a:arista_networks:danz_monitoring_fabric:*:*:arista_multi-cloud_director:*:*:*:*:*","versionEndIncluding":"mcd_2.4.0","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"datePublic":"2025-10-22T15:00:00.000Z","impacts":[{"capecId":"CAPEC-186","descriptions":[{"lang":"en","value":"CAPEC-186 Malicious Software Update"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"

The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Arista recommends customers move to the latest version of each release that contains all the fixes listed below. Fixed versions are as follows for each product:

 
Danz Monitoring Fabric
 
Converged Cloud Fabric
 
Cloud Vision Appliance
 
Multi-Cloud Director
"}],"value":"The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Arista recommends customers move to the latest version of each release that contains all the fixes listed below. Fixed versions are as follows for each product:\n\n \n\nDanz Monitoring Fabric\n\n * DMF 8.7.1 and later releases in the 8.7.x train\n * DMF 8.6.2 and later releases in the 8.6.x train\n * DMF 8.5.3 and later releases in the 8.5.x train\n * DMF 8.4.6 and later releases in the 8.4.x train.\n\n\n \n\nConverged Cloud Fabric\n\n * CCF 6.2.5 and later releases in the 6.2.x train\n\n\n \n\nCloud Vision Appliance\n\n * CVA 7.1.0 and later releases in the CVA 7.x train\n\n\n \n\nMulti-Cloud Director\n\n * MCD 2.4.1 and later releases in the 2.4.x train"}],"source":{"advisory":"124","defect":["BUG1121566","BSC-20815"],"discovery":"INTERNAL"},"workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"A downloaded upgrade image can be manually checked against the hash values published on arista.com.
If the published hash values do not match those of the image this is a potential indicator of compromise.
"}],"value":"A downloaded upgrade image can be manually checked against the hash values published on arista.com https://www.arista.com/support/software-download .\nIf the published hash values do not match those of the image this is a potential indicator of compromise."}],"x_generator":{"engine":"Vulnogram 0.4.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-10-30T14:12:50.353170Z","id":"CVE-2025-54549","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-10-30T14:12:59.838Z"}}]}}}