CVE-2025-54549 Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO
| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
 | Security Advisory 0124 | 22 Oct 202500:00 | – | arista |
 | Arista DANZ Monitoring Fabric 安全漏洞 | 29 Oct 202500:00 | – | cnnvd |
 | CVE-2025-54549 | 29 Oct 202522:55 | – | cve |
 | EUVD-2025-36882 | 30 Oct 202500:31 | – | euvd |
 | Vulnerabilities fixed in Arista Networks products | 3 Nov 202508:26 | – | ncsc |
 | CVE-2025-54549 | 29 Oct 202523:16 | – | nvd |
 | PT-2025-44364 | 29 Oct 202500:00 | – | ptsecurity |
 | CVE-2025-54549: Improper Verification of Cryptographic Signature | 29 Oct 202500:00 | – | rapid7 |
 | CVE-2025-54549 | 30 Oct 202523:19 | – | redhatcve |
 | CVE-2025-54549 Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO | 29 Oct 202522:55 | – | vulnrichment |
[
{
"defaultStatus": "unaffected",
"platforms": [
"DCA-350E-CV",
"DCA-300-CV",
"DCA-250-CV",
"DCA-200-CV",
"Arista Converged Cloud Fabric",
"Arista DANZ Monitoring Fabric",
"Arista Multi-Cloud Director"
],
"product": "DANZ Monitoring Fabric",
"vendor": "Arista Networks",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "DMF 8.6.1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "DMF 8.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "CCF 6.2.4",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "CVA 7.0",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "MCD 2.4.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
29 Oct 2025 22:55Current
CVSS 3.15.9
EPSS0.00083