Arista - vulnerabilities (CVEs)

106 CVEs in 326 products, 1 in the last 30 days, newest from 2026-10-22.

Products

Eos - 46 CVEs
Ng Firewall - 20 CVEs
Cloudvision Portal - 10 CVEs
C-65 Firmware - 8 CVEs
C-75 Firmware - 8 CVEs
O-90 Firmware - 8 CVEs
W-68 Firmware - 8 CVEs
C-200 Firmware - 7 CVEs
C-230 Firmware - 7 CVEs
C-235 Firmware - 7 CVEs
C-250 Firmware - 7 CVEs
C-260 Firmware - 7 CVEs
C-100 Firmware - 6 CVEs
C-110 Firmware - 6 CVEs
C-120 Firmware - 6 CVEs
C-130 Firmware - 6 CVEs
Metamako Operating System - 6 CVEs
O-105 Firmware - 6 CVEs
W-118 Firmware - 6 CVEs
Velocloud Orchestrator - 5 CVEs
Terminattr - 4 CVEs
Cloudeos - 3 CVEs
Mos - 2 CVEs
Access Point - 1 CVEs
Ceos-lab - 1 CVEs
Cloudvision Agni - 1 CVEs
Cloudvision Exchange - 1 CVEs
Dcs-7050cx3-32s-r Firmware - 1 CVEs
Dcs-7050q Eos Software - 1 CVEs
Dcs-7050qx-32s-r Firmware - 1 CVEs
Dcs-7050s Eos Software - 1 CVEs
Dcs-7050t Eos Software - 1 CVEs
Dcs-7280sram-48c6-r Firmware - 1 CVEs
Extensible Operating System - 1 CVEs
Multiaccess - 1 CVEs
Netvisor Os - 1 CVEs
Velocloud Edge - 1 CVEs
Velocloud Gateway - 1 CVEs
Veos - 1 CVEs
Veos-lab - 1 CVEs
Wireless Access Point Firmware - 1 CVEs
32qd - 0 CVEs
48ehs - 0 CVEs
48lbas - 0 CVEs
48lbs - 0 CVEs
48s6qd - 0 CVEs
7010t - 0 CVEs
7010t-48 - 0 CVEs
7010tx-48 - 0 CVEs
7010tx-48-dc - 0 CVEs
7020r - 0 CVEs
7020sr-24c2 - 0 CVEs
7020sr-32c2 - 0 CVEs
7020srg-24c2 - 0 CVEs
7020tr-48 - 0 CVEs
7020tra-48 - 0 CVEs
704x3 - 0 CVEs
7050cx3-32s - 0 CVEs
7050cx3m-32s - 0 CVEs
7050qx-32s - 0 CVEs
7050qx2-32s - 0 CVEs
7050sx-128 - 0 CVEs
7050sx-64 - 0 CVEs
7050sx-72q - 0 CVEs
7050sx2-128 - 0 CVEs
7050sx2-72q - 0 CVEs
7050sx3-48c8 - 0 CVEs
7050sx3-48yc - 0 CVEs
7050sx3-48yc12 - 0 CVEs
7050sx3-48yc8 - 0 CVEs
7050sx3-96yc8 - 0 CVEs
7050tx-48 - 0 CVEs
7050tx-64 - 0 CVEs
7050tx-72q - 0 CVEs
7050tx2-128 - 0 CVEs
7050tx3-48c8 - 0 CVEs
7060cx-32s - 0 CVEs
7060cx2-32s - 0 CVEs
7060dx4-32 - 0 CVEs
7060px4-32 - 0 CVEs
7060sx2-48yc6 - 0 CVEs
7130 - 0 CVEs
7130-16g3s - 0 CVEs
7130-32lb - 0 CVEs
7130-32lba - 0 CVEs
7130-48eh - 0 CVEs
7130-48g3s - 0 CVEs
7130-48l - 0 CVEs
7130-48la - 0 CVEs
7130-48lb - 0 CVEs
7130-48lba - 0 CVEs
7130-96l - 0 CVEs
7130-96la - 0 CVEs
7130-96lb - 0 CVEs
7130-96lba - 0 CVEs
7130-96s - 0 CVEs
7150s-24 - 0 CVEs
7150s-52 - 0 CVEs
7150s-64 - 0 CVEs
7150sc-24 - 0 CVEs
7150sc-64 - 0 CVEs
7160-32cq - 0 CVEs
7160-48tc6 - 0 CVEs
7160-48yc6 - 0 CVEs
7170-32c - 0 CVEs
7170-32cd - 0 CVEs
7170-64c - 0 CVEs
7170b-64c - 0 CVEs
720df-48y - 0 CVEs
720dp-24s - 0 CVEs
720dp-48s - 0 CVEs
720dt-24s - 0 CVEs
720dt-48s - 0 CVEs
720dt-48y - 0 CVEs
720xp-24y6 - 0 CVEs
720xp-24zy4 - 0 CVEs
720xp-48y6 - 0 CVEs
720xp-48zc2 - 0 CVEs
720xp-96zc2 - 0 CVEs
722xpm-48y4 - 0 CVEs
722xpm-48zy8 - 0 CVEs
7250qx-64 - 0 CVEs
7260cx - 0 CVEs
7260cx3 - 0 CVEs
7260cx3-64 - 0 CVEs
7260qx - 0 CVEs
7260qx-64 - 0 CVEs
7260sx2 - 0 CVEs
7280cr-48 - 0 CVEs
7280cr2-60 - 0 CVEs
7280cr2a-30 - 0 CVEs
7280cr2a-60 - 0 CVEs
7280cr2ak-30 - 0 CVEs
7280cr2k-30 - 0 CVEs
7280cr2k-60 - 0 CVEs
7280cr2m-30 - 0 CVEs
7280cr3-32d4 - 0 CVEs
7280cr3-32p4 - 0 CVEs
7280cr3-36s - 0 CVEs
7280cr3-96 - 0 CVEs
7280cr3a-24d12 - 0 CVEs
7280cr3a-48d6 - 0 CVEs
7280cr3a-72 - 0 CVEs
7280cr3ak-24d12 - 0 CVEs
7280cr3ak-48d6 - 0 CVEs
7280cr3ak-72 - 0 CVEs
7280cr3am-24d12 - 0 CVEs
7280cr3am-48d6 - 0 CVEs
7280cr3am-72 - 0 CVEs
7280cr3k-32d4 - 0 CVEs
7280cr3k-32p4 - 0 CVEs
7280cr3k-96 - 0 CVEs
7280cr3mk-32d4s - 0 CVEs
7280cr3mk-32p4s - 0 CVEs
7280dr3-24 - 0 CVEs
7280dr3a-36 - 0 CVEs
7280dr3a-54 - 0 CVEs
7280dr3ak-36 - 0 CVEs
7280dr3ak-54 - 0 CVEs
7280dr3am-36 - 0 CVEs
7280dr3am-54 - 0 CVEs
7280dr3k-24 - 0 CVEs
7280e - 0 CVEs
7280pr3-24 - 0 CVEs
7280pr3k-24 - 0 CVEs
7280qr-c36 - 0 CVEs
7280qr-c36-m - 0 CVEs
7280qr-c72 - 0 CVEs
7280qra-c36s - 0 CVEs
7280qra-c36sm - 0 CVEs
7280r - 0 CVEs
7280r2 - 0 CVEs
7280r3 - 0 CVEs
7280sr-48c6 - 0 CVEs
7280sr2-48yc6 - 0 CVEs
7280sr2-48yc6-m - 0 CVEs
7280sr2a-48yc6 - 0 CVEs
7280sr2a-48yc6-m - 0 CVEs
7280sr2k-48c6-m - 0 CVEs
7280sr3-40yc6 - 0 CVEs
7280sr3-48yc8 - 0 CVEs
7280sr3k-48yc8 - 0 CVEs
7280sr3m-48yc8 - 0 CVEs
7280sra-48c6 - 0 CVEs
7280sra-48c6-m - 0 CVEs
7280sram-48c6 - 0 CVEs
7280srm-40cx2 - 0 CVEs
7280tr-48c6 - 0 CVEs
7280tr3-40c6 - 0 CVEs
7280tra-48c6 - 0 CVEs
7280tra-48c6-m - 0 CVEs
7289r3a-sc - 0 CVEs
7289r3ak-sc - 0 CVEs
7289r3am-sc - 0 CVEs
7300x-32q - 0 CVEs
7300x-64s - 0 CVEs
7300x-64t - 0 CVEs
7300x3-32c - 0 CVEs
7300x3-48yc4 - 0 CVEs
7304 - 0 CVEs
7304x - 0 CVEs
7304x3 - 0 CVEs
7308 - 0 CVEs
7308x - 0 CVEs
7308x3 - 0 CVEs
7316 - 0 CVEs
7316x - 0 CVEs
7320x-32c - 0 CVEs
7324x - 0 CVEs
7328x - 0 CVEs
7358x4 - 0 CVEs
7368x4 - 0 CVEs
7388x5 - 0 CVEs
750 - 0 CVEs
7500e - 0 CVEs
7500r - 0 CVEs
7500r-36cq-lc - 0 CVEs
7500r-36q-lc - 0 CVEs
7500r-48s2cq-lc - 0 CVEs
7500r-8cfpx-lc - 0 CVEs
7500r2 - 0 CVEs
7500r2-36cq-lc - 0 CVEs
7500r2a-36cq-lc - 0 CVEs
7500r2ak-36cq-lc - 0 CVEs
7500r2ak-48ycq-lc - 0 CVEs
7500r2am-36cq-lc - 0 CVEs
7500r2m-36cq-lc - 0 CVEs
7500r3 - 0 CVEs
7500r3-24d - 0 CVEs
7500r3-24p - 0 CVEs
7500r3-36cq - 0 CVEs
7500r3k-36cq - 0 CVEs
7500r3k-48y4d - 0 CVEs
7500rm-36cq-lc - 0 CVEs
7504r - 0 CVEs
7504r-fm - 0 CVEs
7504r3 - 0 CVEs
7508r - 0 CVEs
7508r-fm - 0 CVEs
7508r3 - 0 CVEs
7512r - 0 CVEs
7512r-fm - 0 CVEs
7512r3 - 0 CVEs
7516-sup2 - 0 CVEs
7516n-ch - 0 CVEs
7516r - 0 CVEs
7516r-fm - 0 CVEs
755x - 0 CVEs
758x - 0 CVEs
7800r3-36d - 0 CVEs
7800r3-36p - 0 CVEs
7800r3-48cq - 0 CVEs
7800r3a-36d - 0 CVEs
7800r3a-36dm - 0 CVEs
7800r3a-36p - 0 CVEs
7800r3a-36pm - 0 CVEs
7800r3ak-36dm - 0 CVEs
7800r3ak-36pm - 0 CVEs
7800r3k-36dm - 0 CVEs
7800r3k-48cq - 0 CVEs
7800r3k-48cqms - 0 CVEs
7800r3k-72y - 0 CVEs
7800r3k-72y7512r3 - 0 CVEs
7804r3 - 0 CVEs
7808r3 - 0 CVEs
7812r3 - 0 CVEs
7816lr3 - 0 CVEs
7816r3 - 0 CVEs
96lbs - 0 CVEs
Av2 - 0 CVEs
C-100 - 0 CVEs
C-110 - 0 CVEs
C-120 - 0 CVEs
C-130 - 0 CVEs
C-200 - 0 CVEs
C-230 - 0 CVEs
C-235 - 0 CVEs
C-250 - 0 CVEs
C-260 - 0 CVEs
C-65 - 0 CVEs
C-75 - 0 CVEs
C75-e - 0 CVEs
Ccs-710p-12 - 0 CVEs
Ccs-710p-16p - 0 CVEs
Ccs-720xp-24y6 - 0 CVEs
Ccs-720xp-24zy4 - 0 CVEs
Ccs-720xp-48y6 - 0 CVEs
Ccs-720xp-48zc2 - 0 CVEs
Ccs-720xp-96zc2 - 0 CVEs
Ccs-722xpm-48y4 - 0 CVEs
Ccs-722xpm-48zy8 - 0 CVEs
Ccs-750x-48thp - 0 CVEs
Ccs-750x-48tp - 0 CVEs
Ccs-750x-48zp - 0 CVEs
Ccs-750x-48zxp - 0 CVEs
Ceos - 0 CVEs
Dca-200-veos - 0 CVEs
Dcs-7010tx-48 - 0 CVEs
Dcs-7050cx3-32s - 0 CVEs
Dcs-7050cx3-32s-r - 0 CVEs
Dcs-7050cx3m-32s - 0 CVEs
Dcs-7050q - 0 CVEs
Dcs-7050qx-32s-r - 0 CVEs
Dcs-7050s - 0 CVEs
Dcs-7050sx - 0 CVEs
Dcs-7050sx3-48c8 - 0 CVEs
Dcs-7050sx3-48yc12 - 0 CVEs
Dcs-7050sx3-48yc8 - 0 CVEs
Dcs-7050sx3-96yc8 - 0 CVEs
Dcs-7050t - 0 CVEs
Dcs-7050tx3-48c8 - 0 CVEs
Dcs-7280sram-48c6-r - 0 CVEs
Dcs-7500-12cq-lc - 0 CVEs
Dcs-7500e-12cm-lc - 0 CVEs
Dcs-7500e-36q-lc - 0 CVEs
Dcs-7500e-48s-lc - 0 CVEs
Dcs-7500e-6c2-lc - 0 CVEs
Dcs-7500e-72s-lc - 0 CVEs
Dcs-7500r-36cq-lc - 0 CVEs
Dcs-7500r-36q-lc - 0 CVEs
Dcs-7500r-48s2cq-lc - 0 CVEs
O-105 - 0 CVEs
O-90 - 0 CVEs
O90e - 0 CVEs
W-118 - 0 CVEs
W-68 - 0 CVEs

Newest CVEs of Arista

CVE-2026-114625 - CVSS 9.9 (critical), 2026-10-22: VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact…
CVE-2026-93952 - CVSS 10 (critical), 2026-09-22: VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact…
CVE-2026-16812 - CVSS 10 (critical), 2026-07-27: VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact…
CVE-2026-25624 - CVSS 5.8 (medium), 2026-06-05: An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next…
CVE-2026-25620 - CVSS 7 (high), 2026-06-05: An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management - Arista Next…
CVE-2026-25623 - CVSS 7 (high), 2026-06-05: An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation…
CVE-2026-25622 - CVSS 7 (high), 2026-06-05: A Captive Portal Custom Handler command injection vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). On affected…
CVE-2026-25621 - CVSS 7 (high), 2026-06-05: A Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) due to insecure input…
CVE-2026-7473 - CVSS 6.9 (medium), 2026-06-05: On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic…
CVE-2026-31431 - CVSS 7.8 (high), 2026-04-22: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit…
CVE-2025-2767 - CVSS 9.6 (critical), 2025-04-23: Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
CVE-2024-9188 - CVSS 8.8 (high), 2025-01-10: Specially constructed queries cause cross platform scripting leaking administrator tokens
CVE-2024-9134 - CVSS 8.3 (high), 2025-01-10: Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL…
CVE-2024-9133 - CVSS 6.6 (medium), 2025-01-10: A user with administrator privileges is able to retrieve authentication tokens
CVE-2024-47519 - CVSS 8.3 (high), 2025-01-10: Backup uploads to ETM subject to man-in-the-middle interception
CVE-2024-9132 - CVSS 9.8 (critical), 2025-01-10: The administrator is able to configure an insecure captive portal script
CVE-2024-47518 - CVSS 7.6 (high), 2025-01-10: Specially constructed queries targeting ETM could discover active remote access sessions
CVE-2024-9131 - CVSS 7.2 (high), 2025-01-10: A user with administrator privileges can perform command injection
CVE-2024-47520 - CVSS 7.6 (high), 2025-01-10: A user with advanced report application access rights can perform actions for which they are not authorized
CVE-2024-47517 - CVSS 6.8 (medium), 2025-01-10: Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access
CVE-2024-12831 - CVSS 7.8 (high), 2024-12-20: Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on…
CVE-2024-12830 - CVSS 8.1 (high), 2024-12-20: Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2024-12832 - CVSS 8.3 (high), 2024-12-20: Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files…
CVE-2024-12829 - CVSS 8.8 (high), 2024-12-20: Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
CVE-2024-6387 - CVSS 8.1 (high), 2024-07-01: A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an…
CVE-2024-4578 - CVSS 8.4 (high), 2024-06-27: This Advisory describes an issue that impacts Arista Wireless Access Points. Any entity with the ability to authenticate via SSH to an affected AP as the…
CVE-2023-6068 - CVSS 3.1 (low), 2024-03-04: On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of the…
CVE-2024-27889 - CVSS 8.8 (high), 2024-03-04: Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW). A user with…
CVE-2023-24547 - CVSS 6.5 (medium), 2023-12-06: On affected platforms running Arista MOS, the configuration of a BGP password will cause the password to be logged in clear text that can be revealed in local…
CVE-2023-3646 - CVSS 7.5 (high), 2023-08-29: On affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel panic and cause…