Skip to content
OpenAdvisories

Product · Arista Networks

Arista EOS

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2021-28509

    TerminAttr streams MACsec sensitive data in clear text to other authorized users in CVP

    This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak MACsec …

    Arista Networks Arista EOS Arista TerminAttr Network devices
  • Medium 6.8
    CVE-2021-28508

    TerminAttr streams IPsec sensitive data in clear text to other authorized users in CVP

    This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak IPsec s…

    Arista Networks Arista EOS Arista TerminAttr Network devices
  • Medium 5.7
    CVE-2021-28496

    In Arista's EOS software affected releases, the shared secret profiles sensitive configuration might be leaked when displaying output over eAPI or other JSON outputs to authenticated users on the device.

    On systems running Arista EOS and CloudEOS with the affected release version, when using shared secret profiles the password configured for use by BiDirectional Forwarding Detection (BFD) will be leaked when displaying output over eAPI or other JSON outputs t…

    Arista Networks Arista EOS Network devices