What is CVE-2025-0505?

CVE-2025-0505 is a critical-severity vulnerability in Arista Networks Cloudvision Portal, classified under Improper Privilege Management. CVSS score: 10.0/10. Published 2025-05-08.

How severe is CVE-2025-0505?

Critical severity. CVSS v3 base score is 10.0 out of 10.

Privilege escalation in Arista Networks Cloudvision Portal

CVE-2025-0505

On Arista CloudVision systems (virtual or physical on-premise deployments), Zero Touch Provisioning can be used to gain admin privileges on the CloudVision system, with more permissions than necessary, which can be used to query or manipul…

Vulnerability class: Privilege Escalation

EPSS: 0.006 (43.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N.

Affected products

Arista Networks Cloudvision Portal — versions 2024.2.0, 2024.3.0

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

psirt@arista.com

Frequently asked questions

What is CVE-2025-0505?: CVE-2025-0505 is a critical-severity vulnerability in Arista Networks Cloudvision Portal, classified under Improper Privilege Management. CVSS score: 10.0/10. Published 2025-05-08.
How severe is CVE-2025-0505?: Critical severity. CVSS v3 base score is 10.0 out of 10.