EO
Product
Eos
On CISA KEVExploited in the wild
46
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 17Medium 14Low 4
Watch
Add Eos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-6387 | 8.1 | Jul 1 | Openssh: regresshion - race condition in ssh allows rce/dos Affected: 4.32.0 through 4.32.1f |
| CVE-2023-24509 | 7.8 | Apr 13 | On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing… Affected: 4.23 through 4.23.13m; 4.24.0 before 4.24.11m; 4.25.0 before 4.25.10m; 4.26.0 before 4.26.9m; 4.27.0 before 4.27.7m; 4.28.0 before 4.28.4m |
| CVE-2021-28500 | 7.8 | Jan 14 | An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the… Affected: before 4.20; 4.21.0 through 4.21.14m; 4.22.0 through 4.22.11m; 4.23.0 through 4.23.8m; 4.24.6.0 through 4.24.6m; 4.25.0 through 4.25.4m; +1 more |
| CVE-2023-3646 | 7.5 | Aug 29 | On affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel panic and cause system reload Affected: 4.28.2f through 4.28.5.1m; 4.29.0 before 4.29.2f |
| CVE-2023-24510 | 7.5 | Jun 5 | On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart Affected: through 4.25.10m; 4.26.0 before 4.26.10m; 4.27.0 before 4.27.10m; 4.28.0 before 4.28.7m; 4.29.0 before 4.29.2f |
| CVE-2023-24511 | 7.5 | Apr 12 | On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process Affected: 4.26.0 before 4.26.10m; 4.27.0 before 4.27.9m; 4.28.0 before 4.28.6m; 4.29.0 before 4.29.2f |
| CVE-2021-28510 | 7.5 | Jan 26 | For certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invalid Type-Length-Value (TLV) causes the PTP agent to restart Affected: before 4.23.10; 4.24.0 before 4.24.8; 4.25.0 before 4.25.6; 4.26.0 before 4.26.4; 4.27.0 before 4.27.1 |
| CVE-2021-28505 | 7.5 | Apr 14 | On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL… Affected: 4.26 before 4.26.4m; 4.27 before 4.27.1f |
| CVE-2021-28504 | 7.5 | Apr 1 | On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent… Affected: 4.26 before 4.26.4m; 4.27 before 4.27.1f |
| CVE-2020-15897 | 7.5 | Oct 26 | Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause traffic loss or incorrect forwarding of… Affected: before 4.21.12m; 4.22 before 4.22.7m; 4.23 before 4.23.5m; 4.24 before 4.24.2f |
| CVE-2020-17355 | 7.5 | Oct 21 | Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause a denial of service (restart of agents) by… Affected: 4.21.0 before 4.21.12m; 4.22 before 4.22.7m; 4.23 before 4.23.5m; 4.24.0 before 4.24.2f |
| CVE-2019-18948 | 7.5 | Apr 16 | An issue was found in Arista EOS Affected: 4.21.0 through 4.21.8m; 4.22.0 through 4.22.3m; 4.23.0 through 4.23.1f; 4.15; 4.16; 4.17; +3 more |
| CVE-2019-17596 | 7.5 | Oct 24 | Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key Affected: through 4.23.1f |
| CVE-2018-5254 | 7.5 | Apr 12 | Arista EOS before 4.20.2F allows remote BGP peers to cause a denial of service (Rib agent restart) via a malformed path attribute in an UPDATE message Affected: before 4.20.2f |
| CVE-2015-6855 | 7.5 | Nov 6 | hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other… Affected: All versions, or not specified |
| CVE-2020-24360 | 7.4 | Dec 28 | An issue with ARP packets in Arista’s EOS affecting the 7800R3, 7500R3, and 7280R3 series of products may result in issues that cause a kernel crash, followed by a device reload Affected: 4.22.0f through 4.22.6m; 4.23.0f through 4.23.4m; 4.24.0f through 4.24.2.4f |
| CVE-2021-28507 | 7.1 | Jan 14 | An issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for OpenConfig gNOI and OpenConfig RESTCONF might be bypassed,… Affected: 4.23.0 through 4.23.9m; 4.24.0 through 4.24.7m; 4.25.0 through 4.25.3; 4.25.4 through 4.25.4m; 4.25.5 through 4.25.5.1m; 4.26.0 through 4.26.2f; +5 more |
Showing 17