Arista Networks vulnerabilities, page 3
153 vulnerabilities
Known vulnerabilities in Arista Networks products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 26 products.
CVE-2024-47518arista networksarista edge threat management+1
EPSS score0.44%
Specially constructed queries targeting ETM could discover active remote access sessionsCVE-2024-47519arista networksarista edge threat management+1EPSS score0.35%
Backup uploads to ETM subject to man-in-the-middle interceptionCVE-2024-9188arista networksarista edge threat management+1EPSS score0.50%
Specially constructed queries cause cross platform scripting leaking administrator tokensCVE-2024-9133arista networksarista edge threat management+1EPSS score0.16%
A user with administrator privileges is able to retrieve authentication tokensCVE-2024-9134arista networksarista edge threat management+1EPSS score0.64%
Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.CVE-2024-9132arista networksarista edge threat management+1EPSS score0.70%
The administrator is able to configure an insecure captive portal scriptCVE-2024-9135arista networkseosEPSS score0.36%
On affected platforms running Arista EOS with BGP Link State configured, BGP peer flap can cause the BGP agent to leak memory. This may result in BGP routing processing being terminated and route flapping.CVE-2024-9131arista networksarista edge threat management+1EPSS score1.42%
A user with administrator privileges can perform command injectionCVE-2024-9448arista networkseosEPSS score0.59%
On affected platforms running Arista EOS with Traffic Policies configured the vulnerability will cause received untagged packets not to hit Traffic Policy rules that they are expected to hit. If the rule was to drop the packet, the packet will not be dropped and instead will be forwarded as if the rule was not in place. This could lead to packets being delivered to unexpected destinations.CVE-2024-4578arista networksarista wireless access pointsEPSS score0.49%
This Advisory describes an issue that impacts Arista Wireless Access Points. Any entity with the ability to authenticate via SSH to an affected AP as the “config” user is able to cause a privilege escalation via spawning a bash shell. The SSH CLI session does not require high permissions to exploit this vulnerability, but the config password is required to establish the session. The spawned shell is able to obtain root privileges.CVE-2024-7095arista networkseosEPSS score0.50%
On affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under some circumstances a specially crafted packet can cause the snmpd process to leak memory. This may result in the snmpd process being terminated (causing SNMP requests to time out until snmpd is restarted) and memory pressure for other processes on the switch. Increased memory pressure can cause processes other than snmpd to be at risk for unexpected termination as well.CVE-2024-7142arista networkscloudvision applianceEPSS score0.10%
On Arista CloudVision Appliance (CVA) affected releases running on appliances that support hardware disk encryption (DCA-350E-CV only), the disk encryption might not be successfully performed. This results in the disks remaining unsecured and data on themCVE-2024-27891arista networkseosEPSS score0.28%
On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports. This can cause outgoing packets to incorrectly be allowed or denied.CVE-2024-27889arista networksarista edge threat management - arista ng firewall (ngfw)+1EPSS score8.79%
Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW). A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.CVE-2024-27892arista networkseosEPSS score0.30%
Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexpected configuration being applied to the switch.CVE-2024-27890arista networkseosEPSS score4.43%
Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexpected configuration being applied to the switch.CVE-2024-5872arista networkseosEPSS score0.36%
On affected platforms running Arista EOS, a specially crafted packet with incorrect VLAN tag might be copied to CPU, which may cause incorrect control plane behavior related to the packet, such as route flaps, multicast routes learnt, etc.CVE-2024-6858arista networkseosEPSS score0.14%
In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN.CVE-2024-6437arista networkseos - bgp flowspec+2EPSS score0.53%
On affected platforms running Arista EOS with one of the following features configured to redirect IP traffic to a next hop: policy-based routing (PBR), BGP Flowspec, or interface traffic policy -- certain IP traffic such as IPv4 packets with IP options may bypass the feature's set nexthop action and be slow-path forwarded (FIB routed) by the kernel as the packets are trapped to the CPU instead of following the redirect action's destination.CVE-2024-12378arista networkscloudvision portalEPSS score0.50%
On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear.