Skip to contentArista Networks vulnerabilities
Newest
- arista networks edge threat management - arista next generation firewall (ngfw), arista ng firewall +1 moreArista Edge Threat Management NGFW UI Administrative Cross-Site ScriptingCVE-2026-256245.8 Medium
- arista networks edge threat management - arista next generation firewall (ngfw), arista ng firewall +1 moreArista Edge Threat Management NGFW UI Arbitrary Command ExecutionCVE-2026-256237.0 High
- arista networks edge threat management - arista next generation firewall (ngfw), arista ng firewall +1 moreArista Edge Threat Management NGFW Captive Portal Custom Handler Command InjectionCVE-2026-256227.0 High
- arista networks edge threat management - arista next generation firewall (ngfw), arista ng firewall +1 moreArista Edge Threat Management NGFW Reports Application Insecure Input ValidationCVE-2026-256217.0 High
- arista networks edge threat management - arista next generation firewall (ngfw), arista ng firewall +1 moreArista Edge Threat Management NGFW Captive Portal Encrypted Password Command InjectionCVE-2026-256207.0 High
- arista networks eosArista EOS IPsec Tunnel Sequence Number Mismatch via Interface Flaps when Anti-Replay is DisabledCVE-2026-23798.2 High
- arista eos, extensible operating system +1 moreArista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding BypassCVE-2026-7473In KEVPublic exploit6.9 Medium
- arista networks eos / cloudvision exchange (cvx)Arista CloudVision Exchange (CVX) Cluster Privilege Escalation via MCS Redis SessionCVE-2025-50888.7 High
- arista networks eos / cloudvision exchange (cvx)Arista CloudVision Exchange Cluster Instability via Unexpected Switch MessagesCVE-2025-50907.1 High
- arista networks eos / cloudvision exchange (cvx)Arista EOS SysDB Agent Denial of Service via Malformed CVX Client/Server MessagesCVE-2025-50897.1 High
- arista networks eosArista EOS Dataplane Denial of Service via Malformed IPsec PacketCVE-2025-88738.7 High
- arista networks eosOn affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, a malicious supplicant may bypass authentication.CVE-2023-55028.2 High
- arista networks eosOn affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (SSL Profiles Enabled).CVE-2024-278927.2 High
- arista networks eosOn affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (No SSL Profiles Enabled).CVE-2024-278907.2 High
- arista networks eosOn affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports.CVE-2024-278916.9 Medium
- arista networks eosIn Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN.CVE-2024-68586.5 Medium
- arista networks eosOn affected platforms running Arista EOS with MACsec configuration, a specially crafted packet can cause the MACsec process to terminate unexpectedly. Continuous receipt of these packets with certain…CVE-2025-70485.3 Medium
- arista networks eosA specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restartedCVE-2025-88727.1 High
- arista networks eosOn affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.CVE-2025-88705.6 Medium
- arista networks danz monitoring fabricCryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISOCVE-2025-545495.9 Medium
- arista networks danz monitoring fabricOn affected platforms, restricted users could view sensitive portions of the config database via a debug API (e.g., user password hashes)CVE-2025-545484.3 Medium
- arista networks danz monitoring fabricOn affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a confi…CVE-2025-545475.3 Medium
- arista networks danz monitoring fabricOn affected platforms, restricted users could use SSH port forwarding to access host-internal servicesCVE-2025-545467.5 High
- arista networks danz monitoring fabricOn affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges.CVE-2025-545457.8 High
- arista networks edge threat management - arista next generation firewallDiagnostics command injection vulnerabilityCVE-2025-6978EPSS 14.1%7.2 High
- arista networks edge threat management - arista next generation firewallCaptive Portal can allow authentication bypassCVE-2025-69798.8 High
- arista networks edge threat management - arista next generation firewallCaptive Portal can expose sensitive informationCVE-2025-6980Public exploit7.5 High
- arista networks eosOn affected platforms running Arista EOS, maliciously formed UDP packets with source port 3503 may be accepted by EOS. UDP Port 3503 is associated with LspPing Echo Reply. This can result in unexpecte…CVE-2025-61887.5 High
- arista networks eosOn affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and proto…CVE-2025-34563.8 Low
- arista networks eosn affected platforms running Arista EOS, ACL policies may not be enforced. IPv4 ingress ACL, MAC ingress ACL, or IPv6 standard ingress ACL enabled on one or more ethernet or LAG interfaces may result…CVE-2025-28262.6 Low
- arista networks eosOn affected platforms with hardware IPSec support running Arista EOS with IPsec enabled and anti-replay protection configured, EOS may exhibit unexpected behavior in specific cases. Received duplicate…CVE-2025-27965.3 Medium
- arista networks eosOn affected platforms running Arista EOS, ingress traffic on Layer 2 ports may, under certain conditions, be improperly forwarded to ports associated with different VLANs, resulting in a breach of VLA…CVE-2024-111856.5 Medium
- arista networks eosOn affected platforms running Arista EOS with Traffic Policies configured the vulnerability will cause received untagged packets not to hit Traffic Policy rules that they are expected to hit. If the r…CVE-2024-94487.5 High
- arista networks cloudvision portalOn affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear.CVE-2024-123789.1 Critical
- arista networks cloudvision portalOn affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts…CVE-2024-1118610.0 Critical
- arista networks cloudvision portalOn Arista CloudVision systems (virtual or physical on-premise deployments), Zero Touch Provisioning can be used to gain admin privileges on the CloudVision system, with more permissions than necessary…CVE-2025-050510.0 Critical
- arista networks cloudvisionOn affected versions of the Arista CloudVision Portal (CVP on-prem), the time-bound device onboarding token can be used to gain admin privileges on CloudVision.CVE-2024-81008.7 High
- arista networks eosOn affected platforms running Arista EOS with a gNMI transport enabled, running the gNOI File TransferToRemote RPC with credentials for a remote server may cause these remote-server credentials to be…CVE-2025-09366.5 Medium
- arista networks eosOn affected platforms running Arista EOS with 802.1X configured, certain conditions may occur where a dynamic ACL is received from the AAA server resulting in only the first line of the ACL being inst…CVE-2024-80005.3 Medium
- arista networks eosOn affected platforms running Arista EOS with BGP Link State configured, BGP peer flap can cause the BGP agent to leak memory. This may result in BGP routing processing being terminated and route flap…CVE-2024-91355.3 Medium
- arista networks eosOn affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected.CVE-2025-12609.1 Critical
- arista networks eosOn affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected.CVE-2025-12597.7 High
- arista ng firewall, arista networks edge threat management +1 moreSpecially constructed queries cause cross platform scripting leaking administrator tokensCVE-2024-91888.8 High
- arista ng firewall, arista networks edge threat management +1 moreA user with advanced report application access rights can perform actions for which they are not authorizedCVE-2024-475207.6 High
- arista ng firewall, arista networks edge threat management +1 moreBackup uploads to ETM subject to man-in-the-middle interceptionCVE-2024-475198.3 High
- arista ng firewall, arista networks edge threat management +1 moreSpecially constructed queries targeting ETM could discover active remote access sessionsCVE-2024-475186.4 Medium
- arista ng firewall, arista networks edge threat management +1 moreExpired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM accessCVE-2024-475176.8 Medium
- arista ng firewall, arista networks edge threat management +1 moreMultiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on th…CVE-2024-91348.3 High
- arista ng firewall, arista networks edge threat management +1 moreA user with administrator privileges is able to retrieve authentication tokensCVE-2024-91336.6 Medium
- arista ng firewall, arista networks edge threat management +1 moreThe administrator is able to configure an insecure captive portal scriptCVE-2024-91328.1 High
- Show moreLoading…