Summary
Ein Angreifer kann mehrere Schwachstellen in Arista EOS ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren, einen Denial of Service zu verursachen und in einem Fall möglicherweise Code ausführen.
Product
Arista Extensible Operating System (EOS) ist ein modulares Linux basiertes Netzwerkbetriebssystem.
Vulnerabilities 25
-
Critical 9.8
Security Advisory 0208
On affected platforms running Arista EOS with BGP configured, a specially crafted packet can cause the BGP agent to crash. Successful exploitation causes the BGP agent process to terminate, resulting in the loss of all BGP sessions on the affected device and …
-
Critical 9.6
Security Advisory 0220
On affected Arista EOS platforms with Routing Information Protocol version 2 (RIPv2) configured, under certain conditions, RIPv2 might be silently enabled on management interfaces even when the RIP agent intends to disable it. It allows an unauthenticated att…
-
High 8.8
Security Advisory 0221
An unauthenticated attacker on an adjacent network segment can send crafted RIPv2 packets to a RIP-enabled interface on the device to trigger the Rip agent crash without providing valid credentials. Repeated exploitation reliably interrupts routing service on…
-
High 8.6
Security Advisory 0223
On affected platforms running Arista EOS configured as S-BFD peers, an unauthenticated attacker could send a crafted S-BFD PDU to an initiator device. This crafted PDU could cause the kernel on the initiator device to crash, resulting in an unexpected device …
-
High 8.6
Security Advisory 0206
On affected platforms running Arista EOS with Bidirectional Forwarding Detection (BFD) configured to use keyed MD5 or keyed SHA1 authentication, an unauthenticated attacker with network adjacency (direct or multi-hop) to a BFD-enabled interface can send a spe…
-
High 8.6
Security Advisory 0224
On affected platforms running Arista EOS with Precision Time Protocol (PTP) configured, an unauthenticated attacker with network access to a PTP-enabled port can create a denial of service (DoS) condition by sending traffic to the system.
-
High 8.2
Security Advisory 0217
On affected platforms running Arista EOS with 802.1X with Dynamic Host Configuration Protocol (DHCP) device profiling enabled, a network-adjacent attacker can send a crafted DHCP packet to force the device to record a spoofed device profile. This may potentia…
-
High 8.2
Security Advisory 0209
On affected platforms running Arista EOS with Border Gateway Protocol (BGP) changing the BGP listen port from its default value disables default protective Access Control List (ACL) rules against unexpected BGP peering attempts.
-
High 8.2
Security Advisory 0222
A crafted Error Report can leave EOS stuck believing that a cache reset is in progress, preventing ROA publication, withdrawal reconciliation, and BGP origin-validation updates.
-
High 8.2
Security Advisory 0222
A malformed Error Report can cause EOS to read beyond packet boundaries, potentially terminating the RPKI agent or exposing unintended memory contents through logging.
-
High 8.1
Security Advisory 0221
An unauthenticated attacker on an adjacent network segment can bypass MD5 authentication and have unauthorized RIP route updates accepted by the device. Successful exploitation requires that RIPv2 MD5 authentication is configured on the affected interface. An…
-
High 7.6
Security Advisory 0215
On affected EOS platforms where 802.1x is configured in multi-host authenticated mode and the device is configured with Policy Based Routing (PBR), traffic from unauthenticated hosts may be forwarded to the destination configured in the PBR policies. This cou…
-
High 7.5
Security Advisory 0207
On affected platforms running Arista EOS with Border Gateway Protocol (BGP) configured, An unauthenticated attacker who can establish a BGP peering session with an affected device and can send specially crafted BGP messages to cause repeated BGP session reset…
-
High 7.5
Security Advisory 0218
On affected EOS versions with the eAPI service enabled, a specially crafted HTTP request can allow an unauthenticated, remote attacker to read arbitrary files, including sensitive credentials from the switch filesystem.
-
High 7.0
On affected platforms running Arista EOS with IEEE 802.1X authentication and MACsec using dynamically derived keys, sen…
-
Medium 6.9
On affected platforms running Arista EOS with IPsec AutoVPN Feature configured with dynamic paths, the configured IPsec…
-
Medium 6.5
Security Advisory 0213
On affected platforms running Arista EOS in multi-agent routing model with BGP Segment Routing Traffic Engineering (SR-TE) address family configured, a BGP peer can send crafted BGP packets to cause the BGP process to restart, disrupting all BGP sessions on t…
-
Medium 6.1
This vulnerability affects customers using Arista Pathfinder for WAN path selection with Border Gateway Protocol-Link S…
-
Medium 6.0
On affected Arista EOS platforms running Border Gateway Protocol with Link State ( BGP-LS) and configured with the Dyna…
-
Medium 6.0
On affected platforms running Arista EOS with VPLS-BGP enabled, an attacker who has established a BGP session with the …
-
Medium 5.3
Security Advisory 0214
On affected platforms running Arista EOS with VPLS-BGP enabled, an attacker who has established a BGP session with the PE router can affect the route advertisements of VPLS pseudowires, causing a churn of the established routes with other legitimate BGP peers.
-
Medium 5.3
Security Advisory 0223
On affected platforms running Arista EOS with a S-BFD reflector proxy configured, an unauthenticated attacker could send a crafted S-BFD Protocol Data Unit (PDU) that might cause the device to temporarily cease reflecting S-BFD packets, potentially resulting …
-
Medium 5.3
Security Advisory 0225
On affected platforms running Arista EOS under specific link configurations an attacker with direct connectivity to the system may cause system CPU and memory utilization to increase considerably leading to slow responsiveness and eventually may cause the sys…
-
Medium 4.4
Security Advisory 0210
On affected EOS-based platforms, an attacker who controls a Border Gateway Protocol (BGP) peer can send a crafted BGP message over an established session with the Dynamic Path Selection (DPS) address family negotiated. This can cause the BGP process to termin…
-
Low 2.0
On affected platforms running Arista EOS with automatic certificate management configured and automatic Certificate Aut…
Revision history
-
#1
Initiale Fassung
References
-
Arista Security Advisory 0215 vom 2026-11-10
https://www.arista.com/en/support/advisories-notices/security-advisory/25037-security-advisory-0215
-
Arista Security Advisory 0216 vom 2026-11-10
https://www.arista.com/en/support/advisories-notices/security-advisory/25038-security-advisory-0216
-
Arista Security Advisory 0217 vom 2026-11-10
https://www.arista.com/en/support/advisories-notices/security-advisory/25039-security-advisory-0217
-
Arista Security Advisory 0218 vom 2026-11-10
https://www.arista.com/en/support/advisories-notices/security-advisory/25040-security-advisory-0218
-
Arista Security Advisory 0219 vom 2026-11-10
https://www.arista.com/en/support/advisories-notices/security-advisory/25041-security-advisory-0219
-
Arista Security Advisory 0220 vom 2026-11-10
https://www.arista.com/en/support/advisories-notices/security-advisory/25042-security-advisory-0220
-
Arista Security Advisory 0221 vom 2026-11-10
https://www.arista.com/en/support/advisories-notices/security-advisory/25043-security-advisory-0221
-
Arista Security Advisory 0222 vom 2026-11-10
https://www.arista.com/en/support/advisories-notices/security-advisory/25044-security-advisory-0222
-
Arista Security Advisory 0223 vom 2026-11-10
https://www.arista.com/en/support/advisories-notices/security-advisory/25045-security-advisory-0223
-
Arista Security Advisory 0224 vom 2026-11-10
https://www.arista.com/en/support/advisories-notices/security-advisory/25046-security-advisory-0224
-
Arista Security Advisory 0205 vom 2026-11-10
https://www.arista.com/en/support/advisories-notices/security-advisory/25027-security-advisory-0205
-
Arista Security Advisory 0206 vom 2026-11-10
https://www.arista.com/en/support/advisories-notices/security-advisory/25028-security-advisory-0206
-
Arista Security Advisory 0207 vom 2026-11-10
https://www.arista.com/en/support/advisories-notices/security-advisory/25029-security-advisory-0207
-
Arista Security Advisory 0208 vom 2026-11-10
https://www.arista.com/en/support/advisories-notices/security-advisory/25030-security-advisory-0208
-
Arista Security Advisory 0209 vom 2026-11-10
https://www.arista.com/en/support/advisories-notices/security-advisory/25031-security-advisory-0209
-
Arista Security Advisory 0210 vom 2026-11-10
https://www.arista.com/en/support/advisories-notices/security-advisory/25032-security-advisory-0210
-
Arista Security Advisory 0211 vom 2026-11-10
https://www.arista.com/en/support/advisories-notices/security-advisory/25033-security-advisory-0211
-
Arista Security Advisory 0212 vom 2026-11-10
https://www.arista.com/en/support/advisories-notices/security-advisory/25034-security-advisory-0212
-
Arista Security Advisory 0213 vom 2026-11-10
https://www.arista.com/en/support/advisories-notices/security-advisory/25035-security-advisory-0213
-
Arista Security Advisory 0214 vom 2026-11-10
https://www.arista.com/en/support/advisories-notices/security-advisory/25036-security-advisory-0214
-
Arista Security Advisory 0225 vom 2026-11-10
https://www.arista.com/en/support/advisories-notices/security-advisory/25047-security-advisory-0225