Arista vulnerabilities, page 5

103 vulnerabilities

Known vulnerabilities in Arista products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 40 products.

7.5HighCVE-2019-17596arista · cloudvision_portal +18 morearista cloudvision_portalGo before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.EPSS4.69%7.5HighCVE-2019-18948arista · eosarista eosAn issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M and below releases in the 4.22.x train, 4.23.1F and below releases in the 4.23.x train, and all releases in 4.15, 4.16, 4.17, 4.18, 4.19, 4.20 code train.EPSS1.04%4.9MediumCVE-2019-18615arista · cloudvision_portalarista cloudvision_portalIn CloudVision Portal (CVP) for all releases in the 2018.2 Train, under certain conditions, the application logs user passwords in plain text for certain API calls, potentially leading to user password exposure. This only affects CVP environments where: 1. Devices have enable mode passwords which are different from the user's login password, OR 2. There are configlet builders that use the Device class and specify username and password explicitly Application logs are not accessible or visible from the CVP GUI. Application logs can only be read by authorized users with privileged access to the VM hosting the CVP application.EPSS0.49%7.8HighCVE-2019-18181arista · cloudvision_portalarista cloudvision_portalIn CloudVision Portal all releases in the 2018.1 and 2018.2 Code train allows users with read-only permissions to bypass permissions for restricted functionality via CVP API calls through the Configlet Builder modules. This vulnerability can potentially enable authenticated users with read-only access to take actions that are otherwise restricted in the GUI.EPSS0.34%10CriticalCVE-2026-16812arista networks · velocloud orchestrator on-prem +1 moreVeloCloud Orchestrator OS Command InjectionVeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator. This functionality was intended to be for internal use only and is not intended to be remotely accessible. Hosted and Dedicated versions of VCO have already been patched in advance of this notice going out. This issue was discovered externally and is known to be actively exploited.KEVEPSS1.00%7.8HighCVE-2026-31431amazon · amazon_linux +365 morecrypto: algif_aead - Revert to operating out-of-placeIn the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.KEVEPSS3.44%7HighCVE-2026-25620arista networks · arista edge threat management - arista next generation firewall (ngfw) +1 moreArista Edge Threat Management NGFW Captive Portal Encrypted Password Command InjectionAn encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). This issue uniquely affects version 17.4.0; earlier software releases are not exposed.EPSS0.97%5.8MediumCVE-2026-25624arista networks · arista edge threat management - arista next generation firewall (ngfw) +1 moreArista Edge Threat Management NGFW UI Administrative Cross-Site ScriptingAn administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Unvalidated user-supplied variables are echoed back to administrative profiles, facilitating vector payload processing behavior controls.EPSS0.27%7HighCVE-2026-25622arista networks · arista edge threat management - arista next generation firewall (ngfw) +1 moreArista Edge Threat Management NGFW Captive Portal Custom Handler Command InjectionA Captive Portal Custom Handler command injection vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). On affected platforms, an administrative account logged into the user interface can exploit this input handling behavior to execute arbitrary platform shell commands.EPSS0.97%7HighCVE-2026-25623arista networks · arista edge threat management - arista next generation firewall (ngfw) +1 moreArista Edge Threat Management NGFW UI Arbitrary Command ExecutionAn input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Authenticated administrators can leverage this exposure to obtain underlying terminal script code processing execution permissions.EPSS0.58%7HighCVE-2026-25621arista networks · arista edge threat management - arista next generation firewall (ngfw) +1 moreArista Edge Threat Management NGFW Reports Application Insecure Input ValidationA Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) due to insecure input validation. This issue uniquely affects version 17.4.0; earlier software releases are not exposed.EPSS0.38%10CriticalCVE-2026-93952arista networks · velocloud orchestrator (vco) on-prem +1 moreSecurity Advisory 0183VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator. Hosted, including Dedicated, versions of VCO were impacted and have already been patched.KEVEPSS1.06%7.5HighCVE-2023-24510arista networks · arista eos +1 moreOn the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.EPSS0.62%8.1HighCVE-2023-24546arista · cloudvision_portalarista cloudvision_portalOn affected versions of the CloudVision Portal improper access controls on the connection from devices to CloudVision could enable a malicious actor with network access to CloudVision to get broader access to telemetry and configuration data within the system than intended. This advisory impacts the Arista CloudVision Portal product when run on-premise. It does not impact CloudVision as-a-Service.EPSS0.47%6.5MediumCVE-2023-24548arista networks · eos +1 moreOn affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packetsThe device will continue to be susceptible to the issue until remediation is in place.EPSS0.48%9.3CriticalCVE-2023-24509arista networks · arista eos +1 moreOn affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login to the standby supervisor as a root user, leading t ...Valid user credentials are required in order to exploit this vulnerability.EPSS0.24%6.5MediumCVE-2023-24547arista networks · mos +1 moreOn Arista MOS configuration of a BGP password will cause the password to be logged in clear text.On affected platforms running Arista MOS, the configuration of a BGP password will cause the password to be logged in clear text that can be revealed in local logs or remote logging servers by authenticated users, as well as appear in clear text in the device’s running config.EPSS0.34%7.5HighCVE-2023-24511arista networks · eos +1 moreOn affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process.This may result in the snmpd processing being terminated (causing SNMP requests to time out until snmpd is automatically restarted) and potential memory resource exhaustion for other processes on the switch. The vulnerability does not have any confidentiality or integrity impacts to the system.EPSS0.84%8.8HighCVE-2023-24512arista networks · terminattr +3 moreOn affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch.This situation occurs only when the Streaming Telemetry Agent (referred to as the TerminAttr agent) is enabled and gNMI access is configured on the agent. Note: This gNMI over the Streaming Telemetry Agent scenario is mostly commonly used when streaming to a 3rd party system and is not used by default when streaming to CloudVisionEPSS0.60%7.5HighCVE-2023-24545arista networks · eos +1 moreOn affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch.This causes a leak of packet buffers and if enough malformed packets are received, the switch may eventually stop forwarding traffic.EPSS0.78%