Arista Eos (Arista Networks) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-06-05. Vendor: Arista Networks.

CVEs of Arista Eos

• CVE-2023-24510 - CVSS 7.5 (high), 2023-06-05: On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.
• CVE-2023-24509 - CVSS 9.3 (critical), 2023-04-13: On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or…
• CVE-2021-28508 - CVSS 6.8 (medium), 2022-05-26: This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport…
• CVE-2021-28509 - CVSS 6.1 (medium), 2022-05-26: This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport…
• CVE-2021-28503 - CVSS 9.8 (critical), 2022-02-04: The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows…
• CVE-2021-28500 - CVSS 9.1 (critical), 2022-01-14: An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in…
• CVE-2021-28496 - CVSS 6.5 (medium), 2021-10-21: On systems running Arista EOS and CloudEOS with the affected release version, when using shared secret profiles the password configured for use by…