CVE-2025-0505: On Arista CloudVision systems (virtual or physical on-premise deployments), Zero Touch Provisioning can be used to gain admin privileges on the CloudVision…

PriorityP355critical10CVSS 3.1

AVNACLPRNUINSCCHIHAN

EPSS

0.58%

43.1th percentile

On Arista CloudVision systems (virtual or physical on-premise deployments), Zero Touch Provisioning can be used to gain admin privileges on the CloudVision system, with more permissions than necessary, which can be used to query or manipulate system state for devices under management. Note that CloudVision as-a-Service is not affected.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
arista_networks	cloudvision_portal	—	—
arista_networks	cloudvision_portal	2024.2.0 – 2024.2.1	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.