CVE-2025-54547

On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a configured session timeout expired

Score

CVSS 3.1 5.3 Medium

Status

Deferred - psirt@arista.com

Published

2025-10-29

Last modified

2026-10-08

Weaknesses

CWE-613

Affected products

• Danz Monitoring Fabric (Arista Networks)

References

• https://www.arista.com/en/support/advisories-notices/security-advisory/22538-security-advisory-0124