Filter
AND
AND
Arista EOSIn Arista's EOS software affected releases, eAPI might skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI.
9.8
First published (updated )
Arista EOSArista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F …
7.5
First published (updated )
Arista EOSArista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F …
7.5
First published (updated )
Arista EOSTerminAttr streams IPsec sensitive data in clear text to other authorized users in CVP
6.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Arista EOSIn Arista's EOS software affected releases, the shared secret profiles sensitive configuration might be leaked when displaying output over eAPI or other JSON outputs to authenticated users on the device.
6.5
First published (updated )
Arista EOSTerminAttr streams MACsec sensitive data in clear text to other authorized users in CVP
6.1
First published (updated )
Arista EOSWhen receiving a query, dnsmasq does not check if there is already a pending request for the same na…
4.3
First published (updated )
Arista EOSWhen getting a reply from a forwarded query, dnsmasq checks in forward.c:reply_query() if the reply …
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.