CVE-2015-8236

Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and 4.15 before 4.15.0FX1.1 allows remote attackers to execute arbitrary code as root by leveraging management-plane access, aka Bug 138716.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2015-11-19

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Eos (Arista)

References

• https://www.arista.com/support/advisories-notices/security-advisories/1221-security-advisory-15