Lucene search
MitreCVE-2015-8236HistoryNov 19, 2015 - 11:59 a.m.
CVE-2015-8236
2015-11-1911:59:03
CWE-264
mitre
web.nvd.nist.gov
21
arista
eos
remote code execution
vulnerability
cve-2015-8236
nvd
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
8
Confidence
Low
EPSS
0.009
Percentile
83.3%
Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and 4.15 before 4.15.0FX1.1 allows remote attackers to execute arbitrary code as root by leveraging management-plane access, aka Bug 138716.
Affected configurations
Node
aristaeosRange≤4.11.11
ORaristaeosMatch4.12.5.2
ORaristaeosMatch4.12.6.1
ORaristaeosMatch4.12.7.1
ORaristaeosMatch4.12.8
ORaristaeosMatch4.12.8.1
ORaristaeosMatch4.12.9
ORaristaeosMatch4.12.10
ORaristaeosMatch4.13.1.1f
ORaristaeosMatch4.13.2.1f
ORaristaeosMatch4.13.3.1f
ORaristaeosMatch4.13.4.1f
ORaristaeosMatch4.13.5
ORaristaeosMatch4.13.5.1f
ORaristaeosMatch4.13.6
ORaristaeosMatch4.13.7.2m
ORaristaeosMatch4.13.7.3m
ORaristaeosMatch4.13.7m
ORaristaeosMatch4.13.8m
ORaristaeosMatch4.13.9.1m
ORaristaeosMatch4.13.9m
ORaristaeosMatch4.13.10m
ORaristaeosMatch4.13.11m
ORaristaeosMatch4.13.12m
ORaristaeosMatch4.13.13m
ORaristaeosMatch4.14.0f
ORaristaeosMatch4.14.1f
ORaristaeosMatch4.14.2f
ORaristaeosMatch4.14.3.1f
ORaristaeosMatch4.14.3f
ORaristaeosMatch4.14.4.1f
ORaristaeosMatch4.14.4.2f
ORaristaeosMatch4.14.4f
ORaristaeosMatch4.14.5.1f-ssu
ORaristaeosMatch4.14.5f
ORaristaeosMatch4.14.5fx
ORaristaeosMatch4.14.5fx.1
ORaristaeosMatch4.14.5fx.2
ORaristaeosMatch4.14.5fx.3
ORaristaeosMatch4.14.5fx.4
ORaristaeosMatch4.14.6f
ORaristaeosMatch4.14.7.1f
ORaristaeosMatch4.14.7f
ORaristaeosMatch4.14.8.1f
ORaristaeosMatch4.14.8f
ORaristaeosMatch4.14.9
ORaristaeosMatch4.15.0f
ORaristaeosMatch4.15.0fx
ORaristaeosMatch4.15.0fx1
ORaristaeosMatch4.15.0fxa
ORaristaeosMatch4.15.1f
ORaristaeosMatch4.15.1fx-7060qx
ORaristaeosMatch4.15.1fx-7060x
ORaristaeosMatch4.15.1fxb
ORaristaeosMatch4.15.2f
| Vendor | Product | Version | CPE |
|---|---|---|---|
| arista | eos | * | cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:* |
| arista | eos | 4.12.5.2 | cpe:2.3:o:arista:eos:4.12.5.2:*:*:*:*:*:*:* |
| arista | eos | 4.12.6.1 | cpe:2.3:o:arista:eos:4.12.6.1:*:*:*:*:*:*:* |
| arista | eos | 4.12.7.1 | cpe:2.3:o:arista:eos:4.12.7.1:*:*:*:*:*:*:* |
| arista | eos | 4.12.8 | cpe:2.3:o:arista:eos:4.12.8:*:*:*:*:*:*:* |
| arista | eos | 4.12.8.1 | cpe:2.3:o:arista:eos:4.12.8.1:*:*:*:*:*:*:* |
| arista | eos | 4.12.9 | cpe:2.3:o:arista:eos:4.12.9:*:*:*:*:*:*:* |
| arista | eos | 4.12.10 | cpe:2.3:o:arista:eos:4.12.10:*:*:*:*:*:*:* |
| arista | eos | 4.13.1.1f | cpe:2.3:o:arista:eos:4.13.1.1f:*:*:*:*:*:*:* |
| arista | eos | 4.13.2.1f | cpe:2.3:o:arista:eos:4.13.2.1f:*:*:*:*:*:*:* |
Related
arista
arista
Security Advisory 0015
2015-11-18 00:00:00
nvd
nvd
CVE-2015-8236
2015-11-19 11:59:03
cvelist
cvelist
CVE-2015-8236
2015-11-19 11:00:00
prion
prion
Design/Logic Flaw
2015-11-19 11:59:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
8
Confidence
Low
EPSS
0.009
Percentile
83.3%
Related for CVE-2015-8236