Approved changes feed: RSS · Atom

cpe:2.3:h:arista:7300x3-48yc4:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorArista (6527c28e-420f-5910-9f50-47683159f01a)
Product7300X3 48Yc4 (61536e87-85bc-5891-80a0-e2a3141814d9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-24512 not_vulnerable 2026-06-08 05:56:05.803949 On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch.
HIGH (8.8)
On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent (referred to as the TerminAttr agent) is enabled and gNMI access is configured on the agent. Note: This gNMI over the Streaming Telemetry Agent scenario is mostly commonly used when streaming to a 3rd party system and is not used by default when streaming to CloudVision
Published: 2023-04-25T00:00:00.000Z
Updated: 2025-02-03T19:15:59.467Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24511 not_vulnerable 2026-06-08 05:56:05.789046 On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process.
MEDIUM (5.3)
On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process. This may result in the snmpd processing being terminated (causing SNMP requests to time out until snmpd is automatically restarted) and potential memory resource exhaustion for other processes on the switch. The vulnerability does not have any confidentiality or integrity impacts to the system.
Published: 2023-04-12T00:00:00.000Z
Updated: 2025-02-07T15:47:42.435Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24510 not_vulnerable 2026-06-08 05:56:05.734816 On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.
HIGH (7.5)
On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.
Published: 2023-06-05T00:00:00.000Z
Updated: 2025-01-08T17:46:55.549Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28511 not_vulnerable 2026-06-08 05:31:24.530764 This advisory documents the impact of an internally found vulnerability in Arista EOS for security ACL bypass. The impact of this vulnerability is that the security ACL drop rule might be bypassed if a NAT ACL rule filter with permit action matches t ...
MEDIUM (5.8)
This advisory documents the impact of an internally found vulnerability in Arista EOS for security ACL bypass. The impact of this vulnerability is that the security ACL drop rule might be bypassed if a NAT ACL rule filter with permit action matches the packet flow. This could allow a host with an IP address in a range that matches the range allowed by a NAT ACL and a range denied by a Security ACL to be forwarded incorrectly as it should have been denied by the Security ACL. This can enable an ACL bypass.
Published: 2022-08-05T16:47:31.584Z
Updated: 2026-06-02T14:07:52.943Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28510 not_vulnerable 2026-06-08 05:31:24.520459 For certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invalid Type-Length-Value (TLV) causes the PTP agent to restart. Repeated restarts of the service will make the service unavailable.
MEDIUM (5.3)
For certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invalid Type-Length-Value (TLV) causes the PTP agent to restart. Repeated restarts of the service will make the service unavailable.
Published: 2023-01-24T00:00:00.000Z
Updated: 2025-04-01T18:44:26.214Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26569 not_vulnerable 2026-06-08 05:23:51.371174 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15898 not_vulnerable 2026-06-08 05:19:27.139943 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.