Vulnerability · Published Nov 14, 2025 · Assigned by Arista
CVE-2025-8870On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.
Medium 4.9
In plain English
A medium-severity security flaw in EOS from Arista Networks. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).
Severity (CVSS 3.1)4.9Medium
Exploit odds (30 days)0.2%top 92.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.153
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Arista Networks | EOS | 4.34.2FX |
Weakness: CWE-248 · Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H