GCVE - cpe:2.3:a:arista_networks:arista_eos:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:arista_networks:arista_eos:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Arista Networks (`a0182fe3-0447-5099-835f-342e87c54952`)
Product	Arista Eos (`149b1cef-71f7-525e-bff0-c4c2c8cb2018`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-24510`	vulnerable	2026-06-08 05:56:05.678026	On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart. HIGH (7.5) On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart. Published: 2023-06-05T00:00:00.000Z Updated: 2025-01-08T17:46:55.549Z Open on db.gcve.eu Reference links https://www.arista.com/en/support/advisories-notices/security-advisory/17445-security-advisory-0087	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24509`	vulnerable	2026-06-08 05:56:05.663795	On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login to the standby supervisor as a root user, leading t ... CRITICAL (9.3) On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login to the standby supervisor as a root user, leading to a privilege escalation. Valid user credentials are required in order to exploit this vulnerability. Published: 2023-04-13T00:00:00.000Z Updated: 2025-02-07T15:42:09.265Z Open on db.gcve.eu Reference links https://www.arista.com/en/support/advisories-notices/security-advisory/16985-security-advisory-0082	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-28509`	vulnerable	2026-06-08 05:31:24.479509	TerminAttr streams MACsec sensitive data in clear text to other authorized users in CVP MEDIUM (6.1) This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak MACsec sensitive data in clear text in CVP to other authorized users, which could cause MACsec traffic to be decrypted or modified by other authorized users on the device. Published: 2022-05-26T19:50:36.432Z Updated: 2024-09-16T20:32:30.399Z Open on db.gcve.eu Reference links https://www.arista.com/en/support/advisories-notices/security-advisories/15484-security-advisory-0077	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-28508`	vulnerable	2026-06-08 05:31:24.452832	TerminAttr streams IPsec sensitive data in clear text to other authorized users in CVP MEDIUM (6.8) This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak IPsec sensitive data in clear text in CVP to other authorized users, which could cause IPsec traffic to be decrypted or modified by other authorized users on the device. Published: 2022-05-26T19:48:13.716Z Updated: 2024-09-16T19:47:13.903Z Open on db.gcve.eu Reference links https://www.arista.com/en/support/advisories-notices/security-advisories/15484-security-advisory-0077	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-28503`	vulnerable	2026-06-08 05:31:24.428311	In Arista's EOS software affected releases, eAPI might skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI. HIGH (7.4) The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI. Published: 2022-02-04T22:29:27.998Z Updated: 2024-09-16T23:06:02.607Z Open on db.gcve.eu Reference links https://www.arista.com/en/support/advisories-notices/security-advisories/13605-security-advisory-0072	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-28500`	vulnerable	2026-06-08 05:31:24.416403	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-28496`	vulnerable	2026-06-08 05:31:24.413076	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.