Summary
Ein Angreifer kann mehrere Schwachstellen in Arista EOS ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
Product
Arista Extensible Operating System (EOS) ist ein modulares Linux basiertes Netzwerkbetriebssystem.
Vulnerabilities 7
-
High 8.2
Security Advisory 0171
On affected platforms running Arista EOS with Open Shortest Path First version 2 (OSPFv2) configured, a specially crafted OSPFv2 packet from an unauthenticated attacker on the same broadcast segment, with OSPFv2 authentication configured can cause adjacency f…
-
High 7.4
Security Advisory 0168
On affected platforms running Arista EOS with OpenConfig-related services (i.e., gNMI, gNSI, RESTCONF and NETCONF), sensitive requests and responses may be unintentionally logged. These may be stored on the local EOS device or recorded on remote accounting se…
-
Medium 6.5
Security Advisory 0171
On affected platforms running Arista EOS with OSPFv2 and OSPFv2 segment routing configured, a specially crafted OSPFv2 packet from an adjacent OSPF neighbor may cause OSPF to restart unexpectedly.
-
Medium 5.3
Security Advisory 0172
On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, an unauthenticated attacker on the same OSPFv3 broadcast domain can send a specially crafted set of packets that can cause the Ospf3 agent to restart unexpec…
-
Medium 5.3
Security Advisory 0169
On affected platforms running Arista EOS, when multiple gRPC Network Security Interface (gNSI) transports are configured, a race condition in the gNSI Authz service may cause a policy rotation to fail silently. An authenticated user whose access was revoked b…
-
Medium 4.9
Security Advisory 0167
On affected platforms running Arista EOS, an issue with the gRPC Network Security Interface (gNSI) Authz Rotate RPC may cause an incorrect Authz policy which was uploaded in the ongoing RPC stream to become active. This does not affect Bootz. This issue was d…
-
Medium 4.2
Security Advisory 0170
On affected platforms running Arista EOS, an authenticated user with access to the gNMI (gRPC Network Management Interface) may receive incorrect authorization results, potentially allowing access beyond their currently assigned permissions. This issue was di…
Revision history
-
#1
Initiale Fassung
References
-
Arista Security Advisory vom 2026-09-16
https://www.arista.com/en/support/advisories-notices/security-advisory/24724-security-advisory-0168
-
Arista Security Advisory vom 2026-09-16
https://www.arista.com/en/support/advisories-notices/security-advisory/24723-security-advisory-0167
-
Arista Security Advisory vom 2026-09-16
https://www.arista.com/en/support/advisories-notices/security-advisory/24725-security-advisory-0169
-
Arista Security Advisory vom 2026-09-16
https://www.arista.com/en/support/advisories-notices/security-advisory/24726-security-advisory-0170
-
Arista Security Advisory vom 2026-09-16
https://www.arista.com/en/support/advisories-notices/security-advisory/24727-security-advisory-0171
-
Arista Security Advisory vom 2026-09-16
https://www.arista.com/en/support/advisories-notices/security-advisory/24728-security-advisory-0172