AR
Vendor
Arista
218
CVEs
13
On KEV
1
New 30D
Products
VO10.0
VeloCloud Orchestrator
Arista
5 CVEs4 on KEV1 new
EO9.8
Eos
Arista
46 CVEs3 on KEV0 new
CP8.8
Cloudvision Portal
Arista
10 CVEs1 on KEV0 new
EO5.9
Extensible Operating System
Arista
2 CVEs1 on KEV0 new
CA7.8
Cloudvision Agni
Arista
1 CVEs1 on KEV0 new
NO7.8
Netvisor OS
Arista
1 CVEs1 on KEV0 new
VE7.8
Velocloud Edge
Arista
1 CVEs1 on KEV0 new
VG7.8
Velocloud Gateway
Arista
1 CVEs1 on KEV0 new
NF9.8
NG Firewall
Arista
20 CVEs0 on KEV0 new
CF6.5
C-65 Firmware
Arista
8 CVEs0 on KEV0 new
CF6.5
C-75 Firmware
Arista
8 CVEs0 on KEV0 new
OF6.5
O-90 Firmware
Arista
8 CVEs0 on KEV0 new
WF6.5
W-68 Firmware
Arista
8 CVEs0 on KEV0 new
CF6.5
C-200 Firmware
Arista
7 CVEs0 on KEV0 new
CF6.5
C-230 Firmware
Arista
7 CVEs0 on KEV0 new
CF6.5
C-235 Firmware
Arista
7 CVEs0 on KEV0 new
CF6.5
C-250 Firmware
Arista
7 CVEs0 on KEV0 new
CF6.5
C-260 Firmware
Arista
7 CVEs0 on KEV0 new
CF6.5
C-100 Firmware
Arista
6 CVEs0 on KEV0 new
CF6.5
C-110 Firmware
Arista
6 CVEs0 on KEV0 new
CF6.5
C-120 Firmware
Arista
6 CVEs0 on KEV0 new
CF6.5
C-130 Firmware
Arista
6 CVEs0 on KEV0 new
MO9.8
Metamako Operating System
Arista
6 CVEs0 on KEV0 new
OF6.5
O-105 Firmware
Arista
6 CVEs0 on KEV0 new
WF6.5
W-118 Firmware
Arista
6 CVEs0 on KEV0 new
CL7.5
Cloudeos
Arista
4 CVEs0 on KEV0 new
TE7.8
Terminattr
Arista
4 CVEs0 on KEV0 new
MO7.5
Mos
Arista
2 CVEs0 on KEV0 new
AP6.5
Access Point
Arista
1 CVEs0 on KEV0 new
CE6.5
Ceos-lab
Arista
1 CVEs0 on KEV0 new
CE7.5
Cloudvision Exchange
Arista
1 CVEs0 on KEV0 new
DF9.8
Dcs-7050cx3-32s-r Firmware
Arista
1 CVEs0 on KEV0 new
DE7.5
Dcs-7050q Eos Software
Arista
1 CVEs0 on KEV0 new
DF9.8
Dcs-7050qx-32s-r Firmware
Arista
1 CVEs0 on KEV0 new
DE7.5
Dcs-7050s Eos Software
Arista
1 CVEs0 on KEV0 new
DE7.5
Dcs-7050t Eos Software
Arista
1 CVEs0 on KEV0 new
DF9.8
Dcs-7280sram-48c6-r Firmware
Arista
1 CVEs0 on KEV0 new
MU3.1
Multiaccess
Arista
1 CVEs0 on KEV0 new
VE7.5
Veos
Arista
1 CVEs0 on KEV0 new
VE6.5
Veos-lab
Arista
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-114625 In wildKEVNew | VO Velocloud Orchestrator Arista | 9.9 | Oct 22 | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host |
| CVE-2026-93952 In wildKEV | VO Velocloud Orchestrator Arista | 10.0 | Sep 22 | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host |
| CVE-2026-16812 In wildKEV | VO Velocloud Orchestrator Arista | 10.0 | Jul 27 | VeloCloud Orchestrator OS Command Injection |
| CVE-2026-25624 | NF NG Firewall Arista | 4.8 | Jun 5 | Arista Edge Threat Management NGFW UI Administrative Cross-Site Scripting |
| CVE-2026-25623 | NF NG Firewall Arista | 6.0 | Jun 5 | Arista Edge Threat Management NGFW UI Arbitrary Command Execution |
| CVE-2026-25622 | NF NG Firewall Arista | 6.0 | Jun 5 | Arista Edge Threat Management NGFW Captive Portal Custom Handler Command Injection |
| CVE-2026-25621 | NF NG Firewall Arista | 6.0 | Jun 5 | Arista Edge Threat Management NGFW Reports Application Insecure Input Validation |
| CVE-2026-25620 | NF NG Firewall Arista | 6.0 | Jun 5 | Arista Edge Threat Management NGFW Captive Portal Encrypted Password Command Injection |
| CVE-2026-7473 In wildKEV | EO Eos Arista | 5.8 | Jun 5 | Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass |
| CVE-2026-31431 In wildKEV | VO Velocloud Orchestrator Arista | 7.8 | Apr 22 | crypto: algif_aead - Revert to operating out-of-place |
| CVE-2025-2767 | NF NG Firewall Arista | 9.6 | Apr 23 | Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability |
| CVE-2024-9188 | NF NG Firewall Arista | 8.8 | Jan 10 | Specially constructed queries cause cross platform scripting leaking administrator tokens |
| CVE-2024-9134 | NF NG Firewall Arista | 8.3 | Jan 10 | Multiple SQL Injection vulnerabilities exist in the reporting application |
| CVE-2024-9133 | NF NG Firewall Arista | 5.6 | Jan 10 | A user with administrator privileges is able to retrieve authentication tokens |
| CVE-2024-9132 | NF NG Firewall Arista | 9.8 | Jan 10 | The administrator is able to configure an insecure captive portal script |
| CVE-2024-9131 | NF NG Firewall Arista | 7.2 | Jan 10 | A user with administrator privileges can perform command injection |
| CVE-2024-47520 | NF NG Firewall Arista | 7.6 | Jan 10 | A user with advanced report application access rights can perform actions for which they are not authorized |
| CVE-2024-47519 | NF NG Firewall Arista | 7.1 | Jan 10 | Backup uploads to ETM subject to man-in-the-middle interception |
| CVE-2024-47518 | NF NG Firewall Arista | 7.6 | Jan 10 | Specially constructed queries targeting ETM could discover active remote access sessions |
| CVE-2024-47517 | NF NG Firewall Arista | 6.8 | Jan 10 | Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access |
| CVE-2024-12831 | NF NG Firewall Arista | 7.8 | Dec 20 | Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability |
| CVE-2024-12832 | NF NG Firewall Arista | 6.3 | Dec 20 | Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability |
| CVE-2024-12830 | NF NG Firewall Arista | 7.3 | Dec 20 | Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability |
| CVE-2024-12829 | NF NG Firewall Arista | 8.8 | Dec 20 | Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability |
| CVE-2024-6387 | EO Eos Arista | 8.1 | Jul 1 | Openssh: regresshion - race condition in ssh allows rce/dos |
| CVE-2024-27889 | NF NG Firewall Arista | 8.8 | Mar 4 | Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW) |
| CVE-2023-6068 | MU Multiaccess Arista | 3.1 | Mar 4 | On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of the configured ACL for a… |
| CVE-2023-24547 | MO Mos Arista | 6.5 | Dec 6 | On affected platforms running Arista MOS, the configuration of a BGP password will cause the password to be logged in clear text that can be revealed in local logs or remote… |
| CVE-2023-3646 | EO Eos Arista | 7.5 | Aug 29 | On affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel panic and cause system reload |
| CVE-2023-24548 | EO Eos Arista | 6.5 | Aug 29 | On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be… |
| CVE-2023-24546 | CP Cloudvision Portal Arista | 8.1 | Jun 13 | On affected versions of the CloudVision Portal improper access controls on the connection from devices to CloudVision could enable a malicious actor with network access to… |
| CVE-2023-24510 | EO Eos Arista | 7.5 | Jun 5 | On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart |
| CVE-2023-24512 | EO Eos Arista | 6.5 | Apr 25 | On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in… |
| CVE-2023-24509 | EO Eos Arista | 7.8 | Apr 13 | On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing… |
| CVE-2023-24545 | CL Cloudeos Arista | 7.5 | Apr 12 | On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the… |
| CVE-2023-24511 | EO Eos Arista | 7.5 | Apr 12 | On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process |
| CVE-2023-24513 | CL Cloudeos Arista | 7.5 | Apr 12 | On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the… |
| CVE-2021-28510 | EO Eos Arista | 7.5 | Jan 26 | For certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invalid Type-Length-Value (TLV) causes the PTP agent to restart |
| CVE-2021-28511 | EO Eos Arista | 6.5 | Aug 5 | This advisory documents the impact of an internally found vulnerability in Arista EOS for security ACL bypass. The impact of this vulnerability is that the security ACL drop rule might be bypassed if a NAT ACL rule filter with permit action matches t ... |
| CVE-2022-29071 | CP Cloudvision Portal Arista | 5.5 | Aug 5 | This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where under a certain set of conditions, user passwords can be leaked in the Audit and System logs. The impact of this vu ... |
| CVE-2021-28509 | EO Eos Arista | 6.1 | May 26 | This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols |
| CVE-2021-28508 | TE Terminattr Arista | 6.1 | May 26 | This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols |
| CVE-2021-28505 | EO Eos Arista | 7.5 | Apr 14 | On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL… |
| CVE-2021-28504 | EO Eos Arista | 7.5 | Apr 1 | On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent… |
| CVE-2021-28503 | EO Eos Arista | 9.8 | Feb 4 | The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to… |
| CVE-2021-28507 | EO Eos Arista | 7.1 | Jan 14 | An issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for OpenConfig gNOI and OpenConfig RESTCONF might be bypassed,… |
| CVE-2021-28506 | EO Eos Arista | 9.1 | Jan 14 | An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the… |
| CVE-2021-28501 | TE Terminattr Arista | 7.8 | Jan 14 | An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the… |
| CVE-2021-28500 | EO Eos Arista | 7.8 | Jan 14 | An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the… |
| CVE-2021-28496 | EO Eos Arista | 6.5 | Oct 21 | On systems running Arista EOS and CloudEOS with the affected release version, when using shared secret profiles the password configured for use by BiDirectional Forwarding… |
| CVE-2021-28499 | MO Metamako Operating System Arista | 5.5 | Sep 9 | In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user account passwords set in clear text could leak to users without any password |
| CVE-2021-28498 | MO Metamako Operating System Arista | 7.8 | Sep 9 | In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user enable passwords set in clear text could result in unprivileged users… |
| CVE-2021-28497 | MO Metamako Operating System Arista | 7.8 | Sep 9 | In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, the bash shell might be accessible to unprivileged… |
| CVE-2021-28495 | MO Metamako Operating System Arista | 9.8 | Sep 9 | In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, user authentication can be bypassed when API access is… |
| CVE-2021-28494 | MO Metamako Operating System Arista | 8.8 | Sep 9 | In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, authentication is bypassed by unprivileged users who… |
| CVE-2021-28493 | MO Metamako Operating System Arista | 7.8 | Sep 9 | In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, a user may be able to execute commands despite not… |
| CVE-2020-26147 | OF O-90 Firmware Arista | 5.4 | May 11 | An issue was discovered in the Linux kernel 5.8.9 |
| CVE-2020-26146 | CF C-100 Firmware Arista | 5.3 | May 11 | An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices |
| CVE-2020-26143 | CF C-65 Firmware Arista | 6.5 | May 11 | An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH |
| CVE-2020-26139 | WF W-68 Firmware Arista | 5.3 | May 11 | An issue was discovered in the kernel in NetBSD 7.1 |