Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Arista

Arista vulnerabilities

Products

Eos46
Ng Firewall20
Cloudvision Portal10
C-65 Firmware8
C-75 Firmware8
O-90 Firmware8
W-68 Firmware8
Eos7
C-200 Firmware7
C-230 Firmware7
C-235 Firmware7
C-250 Firmware7
C-260 Firmware7
C-100 Firmware6
C-110 Firmware6
C-120 Firmware6
C-130 Firmware6
Metamako Operating System6
Metamako Operating System6
O-105 Firmware6
W-118 Firmware6
Ng Firewall5
Velocloud Orchestrator5
Cloudeos4
Terminattr4
Velocloud Orchestrator3
Mos2

Newest

Known exploitedIn KEVPublic exploitFix available

arista eosIn Arista's EOS software affected releases, the shared secret profiles sensitive configuration might be leaked when displaying output over eAPI or other JSON outputs to authenticated users on the devi…CVE-2021-284965.7 MediumOctober 21, 2021
arista metamako operating systemIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line,...CVE-2021-284949.6 CriticalSeptember 9, 2021
arista metamako operating systemIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line,...CVE-2021-284938.4 HighSeptember 9, 2021
arista metamako operating systemIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line,...CVE-2021-284957.2 HighSeptember 9, 2021
arista metamako operating systemIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line,...CVE-2021-284974.4 MediumSeptember 9, 2021
arista metamako operating systemIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line,...CVE-2021-284996.3 MediumSeptember 9, 2021
arista metamako operating systemIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line,...CVE-2021-284988.7 HighSeptember 9, 2021
debian linux, linux kernel, arista c-65 firmware +33 more +35 moreAn issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations...CVE-2020-26147Fix available5.4 MediumMay 11, 2021
arista c-100 firmware, c-110 firmware, c-120 firmware +55 more +57 moreAn issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3...CVE-2020-26146Fix available5.3 MediumMay 11, 2021
arista c-100 firmware, c-110 firmware, c-120 firmware +46 more +48 moreAn issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3...CVE-2020-26144Fix available6.5 MediumMay 11, 2021
alfa awus036h firmware, arista c-65 firmware, c-75 firmware +26 more +28 moreAn issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA,...CVE-2020-26143Fix available6.5 MediumMay 11, 2021
alfa awus036h firmware, arista c-100 firmware, c-110 firmware +214 more +216 moreAn issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA,...CVE-2020-26140Fix available6.5 MediumMay 11, 2021
netbsd, arista c-100 firmware, c-110 firmware +199 more +201 moreAn issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames...CVE-2020-26139Fix available5.3 MediumMay 11, 2021
ieee 802.11, arista c-100 firmware, c-110 firmware +217 more +219 moreThe 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired...CVE-2020-24588Fix available3.5 LowMay 11, 2021
ieee 802.11, arista c-100 firmware, c-110 firmware +165 more +167 moreThe 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired...CVE-2020-24587Fix available2.6 LowMay 11, 2021
ieee 802.11, arista c-200 firmware, c-230 firmware +21 more +23 moreThe 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired...CVE-2020-24586Fix available3.5 LowMay 11, 2021
dnsmasq, arista eos, debian linux +1 more +3 moreA flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check...CVE-2020-25686Public exploitFix available3.7 LowJanuary 19, 2021
dnsmasq, arista eos, debian linux +1 more +3 moreA flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query,...CVE-2020-25685Fix available3.7 LowJanuary 19, 2021
dnsmasq, arista eos, debian linux +1 more +3 moreA flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query,...CVE-2020-25684Fix available3.7 LowJanuary 19, 2021
arista eosIn Arista EOS malformed packets can be incorrectly forwarded across VLAN boundaries in one...CVE-2020-158985.3 MediumDecember 28, 2020
arista eosAn issue with ARP packets in Arista’s EOS affecting the 7800R3, 7500R3, and 7280R3 series of...CVE-2020-243607.4 HighDecember 28, 2020
arista eosIn EVPN VxLAN setups in Arista EOS, specific malformed packets can lead to incorrect MAC to IP...CVE-2020-265695.9 MediumDecember 28, 2020
arista eosArista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24...CVE-2020-158977.5 HighOctober 26, 2020
arista cloudvision exchangeArista’s CloudVision eXchange (CVX) server before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before...CVE-2020-131007.5 HighOctober 26, 2020
arista eosArista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24...CVE-2020-173557.5 HighOctober 21, 2020
arista cloudvision portalA vulnerability in Arista’s CloudVision Portal (CVP) prior to 2020.2 allows users with “read-only...CVE-2020-243336.5 MediumSeptember 22, 2020
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, arista access point, debian linux +11 more +13 moreu'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead...CVE-2020-3702Fix available6.5 MediumSeptember 8, 2020
arista velocloud orchestrator, vmware sd-wan by velocloud +1 moreThe VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL...CVE-2020-39738.8 HighJuly 8, 2020
arista veos, cloudeos +1 moreA vulnerability exists in Arista’s Cloud EOS VM / vEOS 4.23.2M and below releases in the 4.23.x...CVE-2020-116227.5 HighJune 10, 2020
pam tacplus project tacplus, arista cloudvision portal, canonical ubuntu linux +1 more +3 moreIn support.c in pam_tacplus 1.3.8 through 1.5.1, the TACACS+ shared secret gets logged via syslog...CVE-2020-13881Fix available7.5 HighJune 6, 2020
arista eosAn issue was found in Arista EOS. Specific malformed ARP packets can impact the software...CVE-2019-189487.5 HighApril 16, 2020
netkit telnet project telnet, arista eos, debian linux +3 more +5 moreutility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary...CVE-2020-10188Fix availableEPSS 74.3%9.8 CriticalMarch 6, 2020
arista dcs-7050cx3-32s-r firmware, dcs-7050qx-32s-r firmware, dcs-7280sram-48c6-r firmware +2 moreArista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F...CVE-2020-9015Public exploitDisputedEPSS 16.5%9.8 CriticalFebruary 20, 2020
arista cloudvision portalIn CloudVision Portal all releases in the 2018.1 and 2018.2 Code train allows users with read...CVE-2019-181817.8 HighDecember 19, 2019
arista cloudvision portalIn CloudVision Portal (CVP) for all releases in the 2018.2 Train, under certain conditions, the...CVE-2019-186154.9 MediumDecember 19, 2019
golang go, arista cloudvision portal, eos +8 more +10 moreGo before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic...CVE-2019-17596Public exploitFix available7.5 HighOctober 24, 2019
arista extensible operating systemA vulnerability has been found in the implementation of the Label Distribution Protocol (LDP)...CVE-2019-148105.9 MediumOctober 10, 2019
arista cloudvision portalArista CloudVision Portal through 2018.1.1 has Incorrect Permissions.CVE-2018-123576.5 MediumAugust 15, 2019
arista eosArista EOS through 4.21.0F allows a crash because 802.1x authentication is mishandled.CVE-2018-140086.5 MediumAugust 15, 2019
arista eosArista EOS before 4.20.2F allows remote BGP peers to cause a denial of service (Rib agent restart...CVE-2018-52547.5 HighApril 12, 2018
arista eosThe Mlag agent in Arista EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F allows remote attackers...CVE-2018-52556.5 MediumMarch 5, 2018
debian linux, linux kernel, arista eos +26 more +28 moreThe tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11,...CVE-2017-18017Fix availableEPSS 52.8%9.8 CriticalJanuary 3, 2018
thekelleys dnsmasq, arista eos, arubanetworks arubaos +18 more +20 moreHeap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...CVE-2017-14491Public exploitFix availableEPSS 86.5%9.8 CriticalOctober 2, 2017
arista cloudvision portalCloudVision Portal (CVP) before 2016.1.2.1 allows remote authenticated users to gain access to...CVE-2016-90128.8 HighJanuary 23, 2017
arista dcs-7050q eos software, dcs-7050s eos software, dcs-7050t eos software +2 moreArista EOS 4.15 before 4.15.8M, 4.16 before 4.16.7M, and 4.17 before 4.17.0F on DCS-7050 series...CVE-2016-68947.5 HighJanuary 4, 2017
arista eosArista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and...CVE-2015-823610.0 HighNovember 19, 2015
qemu, arista eos, canonical ubuntu linux +1 more +3 moreThe ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a...CVE-2015-5278Fix available6.5 MediumSeptember 15, 2015
qemu, arista eos, canonical ubuntu linux +4 more +6 morehw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which...CVE-2015-6855Fix available7.5 HighSeptember 11, 2015
qemu, arista eos, canonical ubuntu linux +8 more +10 moreThe process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process...CVE-2015-6815Fix available3.5 LowSeptember 8, 2015
qemu, arista eos, canonical ubuntu linux +5 more +7 moreInteger overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a...CVE-2015-5239Fix available6.5 MediumSeptember 3, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open