2 lines
2.3 KiB
JSON
2 lines
2.3 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"EOS","vendor":"Arista Networks","versions":[{"lessThanOrEqual":"4.33.1","status":"affected","version":"4.33.0","versionType":"custom"},{"lessThanOrEqual":"4.32.3","status":"affected","version":"4.32.0","versionType":"custom"},{"lessThanOrEqual":"4.31.5","status":"affected","version":"4.31.0","versionType":"custom"},{"lessThanOrEqual":"4.30.8","status":"affected","version":"4.30.0","versionType":"custom"},{"lessThanOrEqual":"4.29.9","status":"affected","version":"4.29.0","versionType":"custom"},{"lessThanOrEqual":"4.28.12","status":"affected","version":"4.28.0","versionType":"custom"}]}],"source":"psirt@arista.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected. This issue can result in users retrieving data that should not have been available"},{"lang":"es","value":"En las plataformas afectadas que ejecutan Arista EOS con OpenConfig configurado, se puede ejecutar una solicitud gNOI cuando debería haber sido rechazada. Este problema puede provocar que los usuarios recuperen datos que no deberían haber estado disponibles"}],"id":"CVE-2025-1259","lastModified":"2026-06-17T08:38:41.613","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.7,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.1,"impactScore":4.0,"source":"psirt@arista.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-1259","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-03-04T20:12:13.556121Z","version":"2.0.3"}}]},"published":"2025-03-04T20:15:37.003","references":[{"source":"psirt@arista.com","url":"https://www.arista.com/en/support/advisories-notices/security-advisory/21098-security-advisory-0111"}],"sourceIdentifier":"psirt@arista.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"psirt@arista.com","type":"Secondary"}]}
|