Login Request a demo
EO
Product
Eos
by Arista · last CVE Jun 5, 2026
On CISA KEVExploited in the wild
46
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities46In the news2Timeline
Severity mix
Critical 7High 17Medium 14Low 4
Severity
All severities46Critical7High17Medium14Low4
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add Eos to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2014-7169
In wildKEV
9.8
100%
Sep 25
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
Affected: 4.9.0 before 4.9.12; 4.10.0 before 4.10.9; 4.11.0 before 4.11.11; 4.12.0 before 4.12.9; 4.13.0 before 4.13.9; 4.14.0 before 4.14.4f
CVE-2014-6271
In wildKEV
9.8
100%
Sep 24
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
Affected: 4.9.0 before 4.9.12; 4.10.0 before 4.10.9; 4.11.0 before 4.11.11; 4.12.0 before 4.12.9; 4.13.0 before 4.13.9; 4.14.0 before 4.14.4f
CVE-2021-28503
9.8
1%
Feb 4
The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to…
Affected: 4.22 through 4.22.9m; 4.23 through 4.23.9; 4.24 through 4.24.7; 4.25 through 4.25.5; 4.26 through 4.26.2
CVE-2020-10188
9.8
74%
Mar 6
utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the…
Affected: through 4.20.15; 4.21.0 through 4.21.10m; 4.22 through 4.22.4m; 4.23 through 4.23.3m; 4.24.0f
CVE-2017-18017
9.8
53%
Jan 3
The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service…
Affected: 4.20.1fx-virtual-router
CVE-2017-14491
9.8
86%
Oct 4
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response
Affected: through 4.15; 4.16 before 4.16.13m; 4.17 before 4.17.8m; 4.18 through 4.18.4.2f
CVE-2021-28506
9.1
1%
Jan 14
An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the…
Affected: 4.24.0 through 4.24.7m; 4.25.0 through 4.25.3; 4.25.4 through 4.25.4m; 4.25.5 through 4.25.5.1m; 4.26.0 through 4.26.2f
Showing 7