Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Arista EOS ausnutzen, um Informationen preiszugeben und Konfigurationen zu ändern.
Product
Arista Extensible Operating System (EOS) ist ein modulares Linux basiertes Netzwerkbetriebssystem.
Vulnerabilities 2
-
Critical 9.1
On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected.
On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected. This issue can result in unexpected configuration/operations being applied to the switch.
-
High 7.7
On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected.
On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected. This issue can result in users retrieving data that should not have been available
Revision history
-
#1
Initiale Fassung
References
-
Arista Security Advisory vom 2025-02-25
https://www.arista.com/en/support/advisories-notices/security-advisory/21098-security-advisory-0111