Arista Networks EOS Multiple Vulnerabilities (SA0019)

The version of Arista Networks EOS running on the remote device is affected by multiple vulnerabilities : - A flaw exists in NTP in the receive function within file ntpd/ntpproto.c that allows packets with an origin timestamp of zero to bypass security checks. An unauthenticated, remote attacker...

Arista Networks EOS Multiple Vulnerabilities (SA0018) (DROWN)

The version of Arista Networks EOS running on the remote device is affected by multiple vulnerabilities in the included OpenSSL library : - A cipher algorithm downgrade vulnerability exists due to a flaw that is triggered when handling cipher negotiation. A remote attacker can exploit this to...

Arista Networks EOS Control Plane Packet Handling DoS (SA0025)

The version of Arista Networks EOS running on the remote device is affected by a denial of service vulnerability due to an unspecified flaw when handling certain packets sent to the control plane. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to cause the...

Security Advisory 0030

Security Advisory 0030 PDF Date: October 2nd, 2017 Version: 1.0 Revision| Date| Changes ---|---|--- 1.0 | October 2nd, 2017 | Public release 1.1 | October 3rd, 2017 | Updates to clarify impact and add mitigation 1.2 | October 6th, 2017 | Updates to the affected software release table 1.3 | Octobe...

Integer Overflow Vulnerability in libmtp 'ptp_unpack_EOS_CustomFuncEx' Function

libmtp is an LGPL library for the Media Transport Protocol. An integer overflow vulnerability exists in the 'ptpunpackEOSCustomFuncEx' function of the ptp-pack.c file in libmtp versions 1.1.12 and earlier. A remote attacker could exploit this vulnerability by plugging a mobile device into a PC vi...

Arista EOS Compliance Checks

Binary data aristacompliancecheck.nbin...

Arista EOS DoS Vulnerability (Security Advisory 0025)

Arista EOS on DCS-7050 series is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Arista EOS Detection (SNMP)

SNMP based detection of Arista EOS devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Code injection

Arista EOS 4.15 before 4.15.8M, 4.16 before 4.16.7M, and 4.17 before 4.17.0F on DCS-7050 series devices allow remote attackers to cause a denial of service device reboot by sending crafted packets to the control plane...

CVE-2016-6894

Arista EOS 4.15 before 4.15.8M, 4.16 before 4.16.7M, and 4.17 before 4.17.0F on DCS-7050 series devices allow remote attackers to cause a denial of service device reboot by sending crafted packets to the control plane...

CVE-2016-6894

Arista EOS DoS CVE-2016-6894 affects DCS-7050 series: versions 4.15 prior to 4.15.8M, 4.16 prior to 4.16.7M, and 4.17 prior to 4.17.0F allow a remote attacker to reboot the device by sending crafted packets to the control plane. The root cause is a vulnerability in how control plane packets are h...

CVE-2016-6894

Arista EOS 4.15 before 4.15.8M, 4.16 before 4.16.7M, and 4.17 before 4.17.0F on DCS-7050 series devices allow remote attackers to cause a denial of service device reboot by sending crafted packets to the control plane...

Security Advisory 0025

Security Advisory 0025 PDF Date: October 17th, 2016 Version: 1.1 Revision | Date | Changes ---|---|--- 1.0 | October 17th, 2016 | Initial Release 1.1 | October 18th, 2016 | Affected platforms section is expanded Affected Platforms:DCS-7050 series only - 7050S, 7050T, 7050Q platforms 7050X series ...

Security Advisory 0024

Security Advisory 0024 PDF Date: October 4th, 2016 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | October 4th, 2016 | Initial release Arista Products vulnerability report for security vulnerabilities announcement from the OpenSSL project on September 22nd, 2016 Product: EOS and...

Security Advisory 0023

Security Advisory 0023 PDF Date: August 15th, 2016 Version: 1.0 Revision| Date| Changes ---|---|--- 1.0 | August 15th, 2016 | Initial release 1.1 | September 15th, 2016 | Updated to include fixed software versions Arista Products vulnerability report for security vulnerability CVE-2016-5696 that...

eosairlines.com XSS vulnerability

Vulnerable URL: http://eosairlines.com/bh.php?dm=homero.com.mx";;alert'OPENBUGBOUNTY';function zif0// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

Security Advisory 0022

Security Advisory 0022 PDF Date: June 28th, 2016 Version: 1.1 Revision| Date| Changes ---|---|--- 1.0 | June 15th, 2016 | Initial release 1.1 | June 28th, 2016 | Updated to remove a part of the mitigation section that involved ipv6 ACLs with hop-limit. This section was removed in order to avoid a...

Security Advisory 0021

Security Advisory 0021 PDF Date: June 13th, 2016 Version: 1.0 Revision| Date| Changes ---|---|--- 1.0 | June 13th, 2016 | Initial release Arista Products vulnerability report for security vulnerability announcement from NGINX on May 31st, 2016 It was announced by NGINX on May 31, 2016 that there ...

Security Advisory 0020

Security Advisory 0020 PDF Date: May 6th, 2016 Version: 1.2 Revision| Date| Changes ---|---|--- 1.0 | May 6th, 2016 | Initial release 1.1 | May 12th, 2016 | Updated to include assessment for CVX and CVP. Change in vulnerability status for CVE-2016-2107. 1.2 | May 20th, 2016 | Updated to include...

Security Advisory 0019

Security Advisory 0019 PDF Date: April 25th, 2018 Version: 1.1 Revision| Date| Changes ---|---|--- 1.0 | May 3rd, 2016 | Initial release 1.1 | April 25th, 2018 | Updated vulnerability information for CVE-2016-1549 Arista Products vulnerability report for security vulnerabilities announcement from...