CVE-2025-6980 - Captive Portal can expose sensitive information

HIGH

Captive Portal can expose sensitive information

Published Oct 23, 2025

7.5

HIGH

CVSS 3.1

EPSS 0.48%

Captive Portal can expose sensitive information

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Arista Networks	Arista Edge Threat Management - Arista Next Generation Firewall	unaffected	Affected ≥ 0.0, ≤ 17.3.1

Vendor solution

The recommended resolution is to upgrade to the version indicated below at your earliest convenience.

* 17.4 Upgrade

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-35727		Advisory
https://https://www.arista.com/en/support/advisories-notices/security-advisory/22535-security-advisory-0123

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Arista

Published Oct 23, 2025

Updated Oct 23, 2025

Reserved Jul 1, 2025

CISA Vulnrichment

Updated Oct 23, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner Arista

Published Oct 23, 2025

Updated Oct 23, 2025

GitHub

No data