CVE-2025-0936

published 2025-05-07

CVE-2025-0936: On affected platforms running Arista EOS with a gNMI transport enabled, running the gNOI File TransferToRemote RPC with credentials for a remote server may…

Priority P3 38 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I H A N

On affected platforms running Arista EOS with a gNMI transport enabled, running the gNOI File TransferToRemote RPC with credentials for a remote server may cause these remote-server credentials to be logged or accounted on the local EOS device or possibly on other remote accounting servers (i.e. TACACS, RADIUS, etc).

Affected

4 ranges

Vendor	Product	Version range	Fixed in
arista_networks	eos	4.30.1F – 4.30.9M	—
arista_networks	eos	4.31.0 – 4.31.5M	—
arista_networks	eos	4.32.0 – 4.32.3M	—
arista_networks	eos	4.33.0 – 4.33.1	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-256