What’s Vulnerable › Products

Arista Networks DANZ Monitoring Fabric vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Arista Networks DANZ Monitoring Fabric version is affected

Latest Arista Networks DANZ Monitoring Fabric vulnerabilities

• CVE-2025-54549 — Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO (CVSS 5.9)
• CVE-2025-54548 — On affected platforms, restricted users could view sensitive portions of the config database via a debug API (e.g., user password hashes) (CVSS 4.3)
• CVE-2025-54547 — On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a configured session timeout expired (CVSS 5.3)
• CVE-2025-54546 — On affected platforms, restricted users could use SSH port forwarding to access host-internal services (CVSS 7.5)
• CVE-2025-54545 — On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges. (CVSS 7.8)