Arista vulnerabilities, page 4

103 vulnerabilities

Known vulnerabilities in Arista products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 40 products.

10CriticalCVE-2014-6271apple · mac_os_x +80 moreapple mac_os_xGNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.KEVEPSS100.00%5.5MediumCVE-2022-29071arista networks · cloudvision portal +1 moreThis advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where under a certain set of conditions, user passwords can be leaked in the Audit and System logs. The impact of this vu ...This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where under a certain set of conditions, user passwords can be leaked in the Audit and System logs. The impact of this vulnerability is that the CVP user login passwords might be leaked to other authenticated users.EPSS0.20%9.8CriticalCVE-2017-14491Alpine Linuxalpine · dnsmasq +26 morealpine dnsmasqHeap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.EPSS86.49%10CriticalCVE-2017-18017arista · eos +46 morearista eosThe tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.EPSS52.84%7.6HighCVE-2024-47520arista networks · arista edge threat management +1 moreA user with advanced report application access rights can perform actions for which they are not authorizedEPSS0.43%6.8MediumCVE-2024-47517arista networks · arista edge threat management +1 moreExpired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM accessEPSS0.41%7.6HighCVE-2024-47518arista networks · arista edge threat management +1 moreSpecially constructed queries targeting ETM could discover active remote access sessionsEPSS0.44%8.3HighCVE-2024-47519arista networks · arista edge threat management +1 moreBackup uploads to ETM subject to man-in-the-middle interceptionEPSS0.35%8.8HighCVE-2024-9188arista networks · arista edge threat management +1 moreSpecially constructed queries cause cross platform scripting leaking administrator tokensEPSS0.50%6.6MediumCVE-2024-9133arista networks · arista edge threat management +1 moreA user with administrator privileges is able to retrieve authentication tokensEPSS0.16%8.3HighCVE-2024-9134arista networks · arista edge threat management +1 moreMultiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.EPSS0.64%9.8CriticalCVE-2024-9132arista networks · arista edge threat management +1 moreThe administrator is able to configure an insecure captive portal scriptEPSS0.70%7.2HighCVE-2024-9131arista networks · arista edge threat management +1 moreA user with administrator privileges can perform command injectionEPSS1.42%8.8HighCVE-2024-27889arista networks · arista edge threat management - arista ng firewall (ngfw) +1 moreMultiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW).A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.EPSS8.79%8.1HighCVE-2024-6387almalinux +75 moreOpenssh: regresshion - race condition in ssh allows rce/dosA security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.EPSS99.51%8.3HighCVE-2024-12832arista · ng_firewallArista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write VulnerabilityThis vulnerability allows remote attackers to create arbitrary files and disclose sensitive information on affected installations of Arista NG Firewall. Authentication is required to exploit this vulnerability. The specific flaw exists within the ReportEntry class. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the www-data user. Was ZDI-CAN-24325.EPSS0.50%8.1HighCVE-2024-12830arista · ng_firewallArista NG Firewall custom_handler Directory Traversal Remote Code Execution VulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the custom_handler method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the www-data user. Was ZDI-CAN-24019.EPSS1.02%7.8HighCVE-2024-12831arista · ng_firewallArista NG Firewall uvm_login Incorrect Authorization Privilege Escalation VulnerabilityThis vulnerability allows local attackers to escalate privileges on affected installations of Arista NG Firewall. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the uvm_login module. The issue results from incorrect authorization. An attacker can leverage this to escalate privileges to resources normally protected from the user. Was ZDI-CAN-24324.EPSS0.16%8.8HighCVE-2024-12829arista · ng_firewallArista NG Firewall ExecManagerImpl Command Injection Remote Code Execution VulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is required to exploit this vulnerability. The specific flaw exists within the ExecManagerImpl class. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-24015.EPSS1.29%5.9MediumCVE-2019-14810arista · extensible_operating_systemarista extensible_operating_systemA vulnerability has been found in the implementation of the Label Distribution Protocol (LDP) protocol in EOS. Under race conditions, the LDP agent can establish an LDP session with a malicious peer potentially allowing the possibility of a Denial of Service (DoS) attack on route updates and in turn potentially leading to an Out of Memory (OOM) condition that is disruptive to traffic forwarding. Affected EOS versions include: 4.22 release train: 4.22.1F and earlier releases 4.21 release train: 4.21.0F - 4.21.2.3F, 4.21.3F - 4.21.7.1M 4.20 release train: 4.20.14M and earlier releases 4.19 release train: 4.19.12M and earlier releases End of support release trains (4.18 and 4.17)EPSS0.67%