CVE-2025-0505

CRITICAL

On Arista CloudVision systems (virtual or physical on-premise deployments), Zero Touch Provisioning can be used to gain admin privileges on the CloudVision system, with more permissions than necess...

Affects 0 products across 1 vendor.

CVSS 3.110.0
EPSS0.7%
Percentile50th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, can impact systems beyond the vulnerable component, full confidentiality impact, full integrity impact, no availability impact.
CWE Weakness Definitions
CWE-269: Improper Privilege Management

Software does not properly assign, modify, track, or check privileges, allowing unauthorized elevation of access.

Related Attack Patterns (CAPEC)
CAPEC-58 Restful Privilege Elevation
via CWE-269
CAPEC-122 Privilege Abuse
via CWE-269
CAPEC-233 Privilege Escalation
via CWE-269

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A critical vulnerability in Arista CloudVision systems allows attackers to gain admin privileges through Zero Touch Provisioning, enabling unauthorized querying and manipulation of system state for managed devices.

BSID: BS-2025-GLOBAL-040063-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2025-0505?
A critical vulnerability in Arista CloudVision systems allows attackers to gain admin privileges through Zero Touch Provisioning, enabling unauthorized querying and manipulation of system state for managed devices.
What is the CVSS score for CVE-2025-0505?
CVE-2025-0505 has CVSS 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N. EPSS: 0.7%.
Is CVE-2025-0505 actively exploited?
No confirmed active exploitation of CVE-2025-0505 as of 2026-09-25.
How do I remediate CVE-2025-0505?
Priority: IMMEDIATE. Advisory: https://www.arista.com/en/support/advisories-notices/security-advisory/21315-security-advisory-0115 PSIRT: [email protected]
What systems are affected by CVE-2025-0505?
CVE-2025-0505 affects Arista.
Vulnerability Details
CVE IDCVE-2025-0505
BSIDBS-2025-GLOBAL-040063-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Published2025-05-08
Last Modified2026-06-17
ICS Relevance15%
Weakness (CWE)
Improper Privilege Management
Domains
NETWORK-INFRA
SourceNVD
Official Description

On Arista CloudVision systems (virtual or physical on-premise deployments), Zero Touch Provisioning can be used to gain admin privileges on the CloudVision system, with more permissions than necessary, which can be used to query or manipulate system state for devices under management. Note that CloudVision as-a-Service is not affected.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability leverages Zero Touch Provisioning to escalate privileges, potentially allowing attackers to perform actions beyond their intended scope on the CloudVision system.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductAffected Versions
Arista — —
Remediation
View Vendor Advisory →

Remediation Priority: IMMEDIATE

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 525 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hasha11bb359d94a7aa4ec02db18d35a5022bbdcb4a5a94dc1a556f106e5e8fcf4cec86a6a81e4e25f8ccf9a5b4d604dcc33244547ed62369b9b3badcf2e96246bc3
Related CVEs affecting Arista
CVE-2026-16812 10.0 VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue ma... CVE-2026-93952 10.0 VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue ma... CVE-2024-11186 10.0 On affected versions of the CloudVision Portal, improper access controls coul... CVE-2015-8236 10.0 Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 be... CVE-2014-6271 9.8 GNU Bash through 4.3 processes trailing strings after function definitions in...
View all Arista CVEs →

Critical Severity - Know Your Exposure

A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →