CVE-2025-5090

CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instability in the CVX cluster. An attacker could use this behavior to create a denial of service (DoS) scenario. Note that this would require the attacker to have a high privilege access to the connected switch to be able to send custom TCP packets to the CVX.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.arista.com/en/support/advisories-notices/security-advisory/22868-security-advisory-0126

Configurations

No configuration.

History

30 Sep 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) CVX no es resiliente a mensajes inesperados de un switch conectado. Esto provoca caídas de agentes en CVX, causando inestabilidad en el clúster de CVX. Un atacante podría usar este comportamiento para crear un escenario de denegación de servicio (DoS). Tenga en cuenta que esto requeriría que el atacante tuviera acceso de alto privilegio al switch conectado para poder enviar paquetes TCP personalizados al CVX.

Information

Published : 2026-06-05 17:16

Updated : 2026-10-07 08:10

NVD link : CVE-2025-5090

Mitre link : CVE-2025-5090

CVE.ORG link : CVE-2025-5090

JSON object : View

Products Affected

No product.

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2025-5090", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-5090", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-09T14:08:56.120293Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@arista.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}], "cvssMetricV40": [{"type": "Secondary", "source": "psirt@arista.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.1, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "psirt@arista.com", "affectedData": [{"vendor": "Arista Networks", "product": "EOS / CloudVision eXchange (CVX)", "versions": [{"status": "affected", "version": "4.34.0F", "versionType": "custom", "lessThanOrEqual": "4.34.1F"}, {"status": "affected", "version": "4.33.0M", "versionType": "custom", "lessThanOrEqual": "4.33.4M"}, {"status": "affected", "version": "4.32.0M", "versionType": "custom", "lessThanOrEqual": "4.32.6M"}, {"status": "affected", "version": "4.31.0", "lessThan": "4.32.0", "versionType": "custom"}, {"status": "affected", "version": "4.30.0", "lessThan": "4.31.0", "versionType": "custom"}], "platforms": ["CloudVision eXchange", "virtual or physical appliance"], "defaultStatus": "unaffected"}]}], "published": "2026-06-05T17:16:30.347", "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/22868-security-advisory-0126", "source": "psirt@arista.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "psirt@arista.com", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instability in the CVX cluster. An attacker could use this behavior to create a denial of service (DoS) scenario. Note that this would require the attacker to have a high privilege access to the connected switch to be able to send custom TCP packets to the CVX."}, {"lang": "es", "value": "CVX no es resiliente a mensajes inesperados de un switch conectado. Esto provoca ca\u00eddas de agentes en CVX, causando inestabilidad en el cl\u00faster de CVX. Un atacante podr\u00eda usar este comportamiento para crear un escenario de denegaci\u00f3n de servicio (DoS). Tenga en cuenta que esto requerir\u00eda que el atacante tuviera acceso de alto privilegio al switch conectado para poder enviar paquetes TCP personalizados al CVX."}], "lastModified": "2026-10-07T08:10:00.200", "sourceIdentifier": "psirt@arista.com"}