GCVE - cpe:2.3:h:arista:7280cr3-32p4:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:arista:7280cr3-32p4:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Arista (`6527c28e-420f-5910-9f50-47683159f01a`)
Product	7280Cr3 32P4 (`60e3ef99-a158-50dc-a3df-c0c0133231a6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-3646`	not_vulnerable	2026-06-08 06:09:40.091494	On affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel panic and cause system reload. MEDIUM (5.9) On affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel panic and cause system reload. Published: 2023-08-29T16:31:57.668Z Updated: 2024-09-30T17:44:07.777Z Open on db.gcve.eu Reference links https://www.arista.com/en/support/advisories-notices/security-advisory/18042-security-advisory-0088	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24548`	not_vulnerable	2026-06-08 05:56:05.918172	On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets MEDIUM (5.3) On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets. The device will continue to be susceptible to the issue until remediation is in place. Published: 2023-08-29T16:13:10.451Z Updated: 2024-09-30T17:46:19.199Z Open on db.gcve.eu Reference links https://www.arista.com/en/support/advisories-notices/security-advisory/18043-security-advisory-0089	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24512`	not_vulnerable	2026-06-08 05:56:05.803321	On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. HIGH (8.8) On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent (referred to as the TerminAttr agent) is enabled and gNMI access is configured on the agent. Note: This gNMI over the Streaming Telemetry Agent scenario is mostly commonly used when streaming to a 3rd party system and is not used by default when streaming to CloudVision Published: 2023-04-25T00:00:00.000Z Updated: 2025-02-03T19:15:59.467Z Open on db.gcve.eu Reference links https://www.arista.com/en/support/advisories-notices/security-advisory/17250-security-advisory-0086	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24511`	not_vulnerable	2026-06-08 05:56:05.781786	On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process. MEDIUM (5.3) On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process. This may result in the snmpd processing being terminated (causing SNMP requests to time out until snmpd is automatically restarted) and potential memory resource exhaustion for other processes on the switch. The vulnerability does not have any confidentiality or integrity impacts to the system. Published: 2023-04-12T00:00:00.000Z Updated: 2025-02-07T15:47:42.435Z Open on db.gcve.eu Reference links https://www.arista.com/en/support/advisories-notices/security-advisory/17239-security-advisory-0084	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-28509`	not_vulnerable	2026-06-08 05:31:24.481055	TerminAttr streams MACsec sensitive data in clear text to other authorized users in CVP MEDIUM (6.1) This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak MACsec sensitive data in clear text in CVP to other authorized users, which could cause MACsec traffic to be decrypted or modified by other authorized users on the device. Published: 2022-05-26T19:50:36.432Z Updated: 2024-09-16T20:32:30.399Z Open on db.gcve.eu Reference links https://www.arista.com/en/support/advisories-notices/security-advisories/15484-security-advisory-0077	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-28508`	not_vulnerable	2026-06-08 05:31:24.465259	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-24360`	not_vulnerable	2026-06-08 05:22:32.844395	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.