Skip to contentArista Networks Eos vulnerabilities
- arista networks eosSecurity Advisory 0160CVE-2026-734597.0 High
- arista networks eosSecurity Advisory 0160CVE-2026-734467.0 High
- arista networks eosOn affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is…CVE-2026-734445.3 Medium
- arista networks eosOn affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from a…CVE-2026-734376.5 Medium
- arista networks eosOn affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with the information option (Option 82), or with the DHCP server configured with matc…CVE-2026-196557.1 High
- arista networks eosOn affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may r…CVE-2026-734589.2 Critical
- arista networks eosOn affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) serversCVE-2026-734676.0 Medium
- arista networks eosOn affected platforms running Arista EOS, under certain circumstances plaintext user passwordsCVE-2026-734666.0 Medium
- arista networks eosOn affected platforms running Arista EOS, under certain circumstances plaintext private keysCVE-2026-734656.0 Medium
- arista networks eosOn affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan authentication sessions. Repeated exploitation of this issue can exhaus…CVE-2026-196416.9 Medium
- arista networks eosOn affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces (SVI) in shared mode, restarting of the secondary switchcard fo…CVE-2026-734516.3 Medium
- arista networks eosA race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued.CVE-2026-759452.1 Low
- arista networks eosA race condition during supplicant re-authentication may leave a stale ACL entry that persists in the system. If the AclAgent subsequently restarts, this stale entry may be applied to new supplicants,…CVE-2026-759445.6 Medium
- arista networks eosA brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window…CVE-2026-759432.1 Low
- arista networks eosAll of the CVEs covered in this advisory apply to affected platforms running Arista EOS with 802.1X authentication and authorization enabled and Access Control Lists (ACLs) configured for per-supplica…CVE-2026-771912.1 Low
- arista networks eosOn affected platforms running Arista EOS with both 802.1X port authentication and the RADIUS proxy feature configured with dynamic authorization, a low-privileged attacker on an adjacent network segme…CVE-2026-734495.9 Medium
- arista networks eosArista EOS IPsec Tunnel Sequence Number Mismatch via Interface Flaps when Anti-Replay is DisabledCVE-2026-23798.2 High
- arista eos, extensible operating system +1 moreArista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding BypassCVE-2026-7473In KEVPublic exploit6.9 Medium
- arista networks eos / cloudvision exchange (cvx)Arista CloudVision Exchange (CVX) Cluster Privilege Escalation via MCS Redis SessionCVE-2025-50888.7 High
- arista networks eos / cloudvision exchange (cvx)Arista CloudVision Exchange Cluster Instability via Unexpected Switch MessagesCVE-2025-50907.1 High
- arista networks eos / cloudvision exchange (cvx)Arista EOS SysDB Agent Denial of Service via Malformed CVX Client/Server MessagesCVE-2025-50897.1 High
- arista networks eosArista EOS Dataplane Denial of Service via Malformed IPsec PacketCVE-2025-88738.7 High
- arista networks eosOn affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, a malicious supplicant may bypass authentication.CVE-2023-55028.2 High
- arista networks eosOn affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (SSL Profiles Enabled).CVE-2024-278927.2 High
- arista networks eosOn affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (No SSL Profiles Enabled).CVE-2024-278907.2 High
- arista networks eosOn affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports.CVE-2024-278916.9 Medium
- arista networks eosIn Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN.CVE-2024-68586.5 Medium
- arista networks eosOn affected platforms running Arista EOS with MACsec configuration, a specially crafted packet can cause the MACsec process to terminate unexpectedly. Continuous receipt of these packets with certain…CVE-2025-70485.3 Medium
- arista networks eosA specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restartedCVE-2025-88727.1 High
- arista networks eosOn affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.CVE-2025-88705.6 Medium
- arista networks eosOn affected platforms running Arista EOS, maliciously formed UDP packets with source port 3503 may be accepted by EOS. UDP Port 3503 is associated with LspPing Echo Reply. This can result in unexpecte…CVE-2025-61887.5 High
- arista networks eosOn affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and proto…CVE-2025-34563.8 Low
- arista networks eosn affected platforms running Arista EOS, ACL policies may not be enforced. IPv4 ingress ACL, MAC ingress ACL, or IPv6 standard ingress ACL enabled on one or more ethernet or LAG interfaces may result…CVE-2025-28262.6 Low
- arista networks eosOn affected platforms with hardware IPSec support running Arista EOS with IPsec enabled and anti-replay protection configured, EOS may exhibit unexpected behavior in specific cases. Received duplicate…CVE-2025-27965.3 Medium
- arista networks eosOn affected platforms running Arista EOS, ingress traffic on Layer 2 ports may, under certain conditions, be improperly forwarded to ports associated with different VLANs, resulting in a breach of VLA…CVE-2024-111856.5 Medium
- arista networks eosOn affected platforms running Arista EOS with Traffic Policies configured the vulnerability will cause received untagged packets not to hit Traffic Policy rules that they are expected to hit. If the r…CVE-2024-94487.5 High
- arista networks eosOn affected platforms running Arista EOS with a gNMI transport enabled, running the gNOI File TransferToRemote RPC with credentials for a remote server may cause these remote-server credentials to be…CVE-2025-09366.5 Medium
- arista networks eosOn affected platforms running Arista EOS with 802.1X configured, certain conditions may occur where a dynamic ACL is received from the AAA server resulting in only the first line of the ACL being inst…CVE-2024-80005.3 Medium
- arista networks eosOn affected platforms running Arista EOS with BGP Link State configured, BGP peer flap can cause the BGP agent to leak memory. This may result in BGP routing processing being terminated and route flap…CVE-2024-91355.3 Medium
- arista networks eosOn affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected.CVE-2025-12609.1 Critical
- arista networks eosOn affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected.CVE-2025-12597.7 High
- arista networks eosOn affected platforms running Arista EOS, a specially crafted packet with incorrect VLAN tag might be copied to CPU, which may cause incorrect control plane behavior related to the packet, such as rou…CVE-2024-58726.5 Medium
- arista networks eosOn affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under some circumstances a specially crafted packet can cause the snmpd process to leak…CVE-2024-70954.3 Medium
- arista networks eos - bgp flowspec, eos - interface traffic policy, eos-policy based routing (pbr) +2 moreOn affected platforms running Arista EOS with one of the following features configured to redirect IP traffic to a next hop: policy-based routing (PBR), BGP Flowspec, or interface traffic policy -- ce…CVE-2024-64375.8 Medium
- arista eosOn affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel panic and cause system reload.CVE-2023-36465.9 Medium
- arista eosOn affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward pac…CVE-2023-245485.3 Medium
- arista eosOn the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.CVE-2023-245107.5 High
- arista eosOn affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login…CVE-2023-245099.3 Critical
- arista cloudeos, arista networks eos +1 moreOn affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch.CVE-2023-245457.5 High
- arista cloudeos, arista networks eos +1 moreOn affected platforms running Arista CloudEOS a size check bypass issue in the Software Forwarding Engine (Sfe) may allow buffer over reads in later code. Additionally, depending on configured options…CVE-2023-245136.5 Medium
- Show moreLoading…