Latest vulnerabilities for vendor "arista"

6.6

First published (updated )

CVE-2024-12831

Arista NG Firewall(0Day) Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability

8.3

First published (updated )

CVE-2024-12832

Arista NG Firewall(0Day) Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability

8.1

First published (updated )

CVE-2024-12830

Arista NG Firewall(0Day) Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability

7.2

First published (updated )

CVE-2024-12829

Arista NG FirewallZDI-24-1717: (0Day) Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability

7.2

First published (updated )

ZDI-CAN-24015

Never miss a vulnerability like this again

Arista NG Firewall(0Day) Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability

7.2

First published (updated )

ZDI-24-1717

Arista NG Firewall(0Day) Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability

6.6

First published (updated )

ZDI-24-1720

Arista NG FirewallZDI-24-1720: (0Day) Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability

6.6

First published (updated )

ZDI-CAN-24324

Arista NG Firewall(0Day) Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability

8.1

First published (updated )

ZDI-24-1718

Arista NG FirewallZDI-24-1718: (0Day) Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability

8.1

First published (updated )

ZDI-CAN-24019

Never miss a vulnerability like this again

Arista NG FirewallZDI-24-1719: (0Day) Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability

8.3

First published (updated )

ZDI-CAN-24325

Arista NG Firewall(0Day) Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability

8.3

First published (updated )

ZDI-24-1719

Arista MOSOn Arista MOS configuration of a BGP password will cause the password to be logged in clear text.

6.5

First published (updated )

CVE-2023-24547

Arista EOSOn affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel panic and cause system reload.

7.5

First published (updated )

CVE-2023-3646

Arista EOSOn affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets

6.5

First published (updated )

CVE-2023-24548

Never miss a vulnerability like this again

Arista CloudVision PortalOn affected versions of the CloudVision Portal improper access controls on the connection from devic…

8.1

First published (updated )

CVE-2023-24546

Arista EOSOn the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to r…

7.5

First published (updated )

CVE-2023-24510

Arista EOSOn affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI re…

8.8

First published (updated )

CVE-2023-24512

Arista EOSCVE-2023-24509

critical

9.3

First published (updated )

CVE-2023-24509

Arista EOSOn affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause …

7.5

First published (updated )

CVE-2023-24511

Never miss a vulnerability like this again

Arista CloudEOSOn affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can l…

7.5

First published (updated )

CVE-2023-24513

Arista CloudEOSOn affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch.

7.5

First published (updated )

CVE-2023-24545

Arista EOSFor certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invalid Type-Length-Value (TLV) causes the PTP agent to restart. Repeated restarts of the service will make the service unavailable.

7.5

First published (updated )

CVE-2021-28510

Arista EOSThis advisory documents the impact of an internally found vulnerability in Arista EOS for security ACL bypass. The impact of this vulnerability is that the security ACL drop rule might be bypassed if a NAT ACL rule filter with permit action matches t ...

6.5

First published (updated )

CVE-2021-28511

Arista CloudVision PortalThis advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where under a certain set of conditions, user passwords can be leaked in the Audit and System logs. The impact of this vu ...

5.5

First published (updated )

CVE-2022-29071

Never miss a vulnerability like this again

Arista EOSTerminAttr streams MACsec sensitive data in clear text to other authorized users in CVP

6.1

First published (updated )

CVE-2021-28509

Arista EOSTerminAttr streams IPsec sensitive data in clear text to other authorized users in CVP

6.8

First published (updated )

CVE-2021-28508

Arista EOSOn Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol fi ...

7.5

First published (updated )

CVE-2021-28504

Arista EOSOn affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL rules in that access list will ignore the specified IP protocol.

7.5

First published (updated )

CVE-2021-28505

Arista EOSIn Arista's EOS software affected releases, eAPI might skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI.

critical

9.8

First published (updated )

CVE-2021-28503

Never miss a vulnerability like this again