← CVE Intelligence

CVE-2025-1259

On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected. PUBLISHED

Description (CNA)

On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected. This issue can result in users retrieving data that should not have been available

Affected (CNA)

Vendor / productVersions
Arista Networks / EOSaffected 4.33.0 through 4.33.1; affected 4.32.0 through 4.32.3; affected 4.31.0 through 4.31.5; affected 4.30.0 through 4.30.8; affected 4.29.0 through 4.29.9; affected 4.28.0 through 4.28.12

CWE

CWE-284

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.