Arista 7324X

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:h:arista:7324x:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorArista (6527c28e-420f-5910-9f50-47683159f01a)
Product7324X (d91f76f8-d04d-5946-843b-c870d937526b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-24509 not_vulnerable 2026-06-08 05:56:05.669270 On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login to the standby supervisor as a root user, leading t ...
CRITICAL (9.3)
On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login to the standby supervisor as a root user, leading to a privilege escalation. Valid user credentials are required in order to exploit this vulnerability.
Published: 2023-04-13T00:00:00.000Z
Updated: 2025-02-07T15:42:09.265Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28510 not_vulnerable 2026-06-08 05:31:24.522696 For certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invalid Type-Length-Value (TLV) causes the PTP agent to restart. Repeated restarts of the service will make the service unavailable.
MEDIUM (5.3)
For certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invalid Type-Length-Value (TLV) causes the PTP agent to restart. Repeated restarts of the service will make the service unavailable.
Published: 2023-01-24T00:00:00.000Z
Updated: 2025-04-01T18:44:26.214Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26569 not_vulnerable 2026-06-08 05:23:51.373396 Details available
In EVPN VxLAN setups in Arista EOS, specific malformed packets can lead to incorrect MAC to IP bindings and as a result packets can be incorrectly forwarded across VLAN boundaries. This can result in traffic being discarded on the receiving VLAN. This affects versions: 4.21.12M and below releases in the 4.21.x train; 4.22.7M and below releases in the 4.22.x train; 4.23.5M and below releases in the 4.23.x train; 4.24.2F and below releases in the 4.24.x train.
Published: 2020-12-28T15:52:48.000Z
Updated: 2024-08-04T15:56:04.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15898 not_vulnerable 2026-06-08 05:19:27.142014 Details available
In Arista EOS malformed packets can be incorrectly forwarded across VLAN boundaries in one direction. This vulnerability is only susceptible to exploitation by unidirectional traffic (ex. UDP) and not bidirectional traffic (ex. TCP). This affects: EOS 7170 platforms version 4.21.4.1F and below releases in the 4.21.x train; EOS X-Series versions 4.21.11M and below releases in the 4.21.x train; 4.22.6M and below releases in the 4.22.x train; 4.23.4M and below releases in the 4.23.x train; 4.24.2.1F and below releases in the 4.24.x train.
Published: 2020-12-28T18:16:58.000Z
Updated: 2024-08-04T13:30:23.273Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.