CVE-2021-28506

An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device...

CVE-2020-15897

Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause traffic loss or incorrect forwarding of traffic via a malformed link-state PDU to the IS-IS router...

Arista EOS Denial of Service Vulnerability

Arista EOS is a modular operating system from Arista Networks, Inc. that provides the foundation platform for next-generation data center and cloud networking business requirements. A security vulnerability exists in Arista EOS versions 4.15 prior to 4.15.8M, 4.16 prior to 4.16.7M and 4.17 prior ...

Arista EOS Remote Arbitrary Code Execution Vulnerability

EOS is Arista's network operating system, a standalone image that runs on all Arista devices and virtual machines. An elevation of privilege vulnerability exists in Arista EOS. By accessing the admin panel, a remote attacker can execute arbitrary code with root privileges...