Riskcovery

CVE-2025-54547

On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a configured session timeout expired

State
Published
Severity
5.3 Medium
Published
Oct 29, 2025
Updated
Oct 30, 2025
Reserved
Jul 24, 2025

Read the record on cve.org

Description

On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a configured session timeout expired

Scores

CVSSScoreVectorSource
3.15.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LArista

Weaknesses

Affected Products

ProductVersions
DANZ Monitoring FabricArista Networks
  • 0Affected
  • DMF 8.6.1 and earlierAffected
  • DMF 8.5.2 and earlierAffected
  • CCF 6.2.4 and earlierAffected
  • CVA 7.0 and earlierAffected
  • MCD 2.4.0 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.