CVE-2025-0505

CVE-2025-0505 is a critical vulnerability affecting Arista CloudVision on-premise deployments, where Zero Touch Provisioning can be leveraged to gain administrative privileges with excessive permissions, potentially allowing unauthorized manipulation of managed devices. This vulnerability carries a CVSS score of 10.0 (CRITICAL) due to its network-based attack vector, low attack complexity, and high impact on confidentiality and integrity, without requiring user interaction. While the FAUCET Risk Score is high at 89/100, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.