Privilege Escalation Vulnerability in Arista CloudVision Systems

CVE-2025-0505

What is CVE-2025-0505?

A privilege escalation vulnerability exists in Arista CloudVision systems, which allows unauthorized users to leverage the Zero Touch Provisioning feature to gain administrative privileges. This could result in enhanced permissions enabling them to monitor or manipulate the state of devices managed on the platform. It's important to note that CloudVision as-a-Service is not impacted by this vulnerability, emphasizing the need for users of on-premise deployments to apply necessary security measures.

References