CVE-2025-1259

7.7 highEPSS 0.4%

High (7.7). EPSS 0.4% chance of exploitation in the next 30 days.

On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected. This issue can result in users retrieving data that should not have been available

Severity

CVSS 3.1

7.7 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2025-03-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.arista.com/en/support/advisories-notices/security-advisory/21098-security-advisory-0111

Check your stack JSON