Eos Cloudvision Exchange Cvx (Arista Networks) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-06-05. Vendor: Arista Networks.

CVEs of Eos Cloudvision Exchange Cvx

• CVE-2025-5090 - CVSS 7.1 (high), 2026-06-05: CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instability in the CVX cluster. An attacker…
• CVE-2025-5089 - CVSS 7.1 (high), 2026-06-05: In a CVX cluster, an EOS switch connected to a CVX server is not resilient to certain malformed messages received from the connected CVX server. Similarly,…
• CVE-2025-5088 - CVSS 8.7 (high), 2026-06-05: An authenticated Redis session could be used to obtain full root access to all servers in the CVX cluster. Note that this would require an attacker to have…