CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instability in the CVX cluster. An attacker could use this behavior to create a denial of service (DoS) scenario. Note that this would require the attacker to have a high privilege access to the connected switch to be able to send custom TCP packets to the CVX.
PUBLISHED5.2CWE-20
Arista CloudVision Exchange Cluster Instability via Unexpected Switch Messages
Problem type
Affected products
Arista Networks
EOS / CloudVision eXchange (CVX)
<= 4.34.1F - AFFECTED
<= 4.33.4M - AFFECTED
<= 4.32.6M - AFFECTED
< 4.32.0 - AFFECTED
< 4.31.0 - AFFECTED
References
GitHub Security Advisories
GHSA-3hcx-j6wp-vh2q
CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes...
https://github.com/advisories/GHSA-3hcx-j6wp-vh2qCVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instability in the CVX cluster. An attacker could use this behavior to create a denial of service (DoS) scenario. Note that this would require the attacker to have a high privilege access to the connected switch to be able to send custom TCP packets to the CVX.
JSON source
https://cveawg.mitre.org/api/cve/CVE-2025-5090Click to expand
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2025-5090",
"assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7",
"assignerShortName": "Arista",
"dateUpdated": "2026-06-05T15:49:27.770Z",
"dateReserved": "2025-05-22T16:26:48.444Z",
"datePublished": "2026-06-05T15:49:27.770Z",
"state": "PUBLISHED"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7",
"shortName": "Arista",
"dateUpdated": "2026-06-05T15:49:27.770Z"
},
"datePublic": "2025-11-18T16:46:00.000Z",
"title": "Arista CloudVision Exchange Cluster Instability via Unexpected Switch Messages",
"descriptions": [
{
"lang": "en",
"value": "CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instability in the CVX cluster. An attacker could use this behavior to create a denial of service (DoS) scenario. Note that this would require the attacker to have a high privilege access to the connected switch to be able to send custom TCP packets to the CVX.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "<p>CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instability in the CVX cluster. An attacker could use this behavior to create a denial of service (DoS) scenario. Note that this would require the attacker to have a high privilege access to the connected switch to be able to send custom TCP packets to the CVX.</p>"
}
]
}
],
"affected": [
{
"vendor": "Arista Networks",
"product": "EOS / CloudVision eXchange (CVX)",
"platforms": [
"CloudVision eXchange",
"virtual or physical appliance"
],
"defaultStatus": "unaffected",
"versions": [
{
"version": "4.34.0F",
"status": "affected",
"versionType": "custom",
"lessThanOrEqual": "4.34.1F"
},
{
"version": "4.33.0M",
"status": "affected",
"versionType": "custom",
"lessThanOrEqual": "4.33.4M"
},
{
"version": "4.32.0M",
"status": "affected",
"versionType": "custom",
"lessThanOrEqual": "4.32.6M"
},
{
"version": "4.31.0",
"status": "affected",
"versionType": "custom",
"lessThan": "4.32.0"
},
{
"version": "4.30.0",
"status": "affected",
"versionType": "custom",
"lessThan": "4.31.0"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "CWE-20: Improper Input Validation",
"cweId": "CWE-20",
"type": "CWE"
}
]
}
],
"references": [
{
"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/22868-security-advisory-0126",
"tags": [
"vendor-advisory"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM"
}
},
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"configurations": [
{
"lang": "en",
"value": "In order to be vulnerable to CVE-2025-5090, the following condition must be met: CVX must be configured:\n\n\n\n\ncvx1#show cvx\n Status: Enabled\n Mode: Standalone\n Heartbeat interval: 20.0\n Heartbeat timeout: 60.0\n Client connection state preserving: Disabled\n \ncvx1#show running-config section cvx\ncvx\n no shutdown",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "<p>In order to be vulnerable to CVE-2025-5090, the following condition must be met: CVX must be configured:</p>\n<pre><code>cvx1#show cvx\n Status: Enabled\n Mode: Standalone\n Heartbeat interval: 20.0\n Heartbeat timeout: 60.0\n Client connection state preserving: Disabled\n \ncvx1#show running-config section cvx\ncvx\n no shutdown</code></pre>"
}
]
}
],
"workarounds": [
{
"lang": "en",
"value": "There is no mitigation for this issue.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "<p>There is no mitigation for this issue.</p>"
}
]
}
],
"solutions": [
{
"lang": "en",
"value": "The recommended resolution is to upgrade to a remediated software version at your earliest convenience. CVE-2025-5090 has been fixed in the following releases:\n\n\n\n * 4.34.2F and later releases in the 4.34.x train\n\n * 4.33.5M and later releases in the 4.33.x train\n\n * 4.32.7M and later releases in the 4.32.x train",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "<p>The recommended resolution is to upgrade to a remediated software version at your earliest convenience. CVE-2025-5090 has been fixed in the following releases:</p>\n<ul>\n <li>4.34.2F and later releases in the 4.34.x train</li>\n <li>4.33.5M and later releases in the 4.33.x train</li>\n <li>4.32.7M and later releases in the 4.32.x train</li>\n</ul>"
}
]
}
]
}
}
}