Summary
Ein Angreifer kann mehrere Schwachstellen in Arista EOS ausnutzen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.
Product
Arista Extensible Operating System (EOS) ist ein modulares Linux basiertes Netzwerkbetriebssystem.
Vulnerabilities 2
-
High 7.5
On affected platforms running Arista EOS, maliciously formed UDP packets with source port 3503 may be accepted by EOS. UDP Port 3503 is associated with LspPing Echo Reply. This can result in unexpected behaviors, especially for UDP based services that do n
On affected platforms running Arista EOS, maliciously formed UDP packets with source port 3503 may be accepted by EOS. UDP Port 3503 is associated with LspPing Echo Reply. This can result in unexpected behaviors, especially for UDP based services that do not …
-
Low 3.8
On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and protocol specific encrypted secrets from the device running-c
On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and protocol specific encrypted secrets from the device running-conf…
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2025-25755
-
#1
Initiale Fassung
References
-
Arista Security Advisory vom 2025-07-22
https://www.arista.com/en/support/advisories-notices/security-advisory/22021-security-advisory-0121
-
Arista Security Advisory vom 2025-07-22
https://www.arista.com/en/support/advisories-notices/security-advisory/22022-security-advisory-0122