Known vulnerabilities in Arista CloudEOS VM

Vendor: Arista Networks
Software: Arista CloudEOS VM
Software CPE: cpe:2.3:o:arista:arista_cloudeos_vm:*:*:*:*:*:*:*:*
Website: https://www.arista.com/en/
Total vulnerabilities: 13
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Arista CloudEOS VM Arista CloudEOS VM is affected by 13 known vulnerabilities: 10 medium, 3 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126174 - Buffer Access with Incorrect Length Value
CVE-2025-7048		 CWE-805 Medium
No
No
 4.31.10M, 4.32.8M, 4.33.6M, 4.34.4M, 4.35.0F 15.04.2026 SB20260415108
#VU126173 - Resource exhaustion
CVE-2025-8872		 CWE-400 Medium
No
No
 4.31.9M, 4.32.8M, 4.33.5M, 4.34.2F 15.04.2026 SB20260415107
#VU126171 - Improper Validation of Syntactic Correctness of Input
CVE-2025-8873		 CWE-1286 Medium
No
No
 4.32.7M, 4.33.5M 15.04.2026 SB20260415106
#VU126170 - Operation on a Resource after Expiration or Release
CVE-2026-2379		 CWE-672 Medium
No
No
 4.31.10M, 4.32.8M, 4.33.6M, 4.34.4M, 4.35.0F 15.04.2026 SB20260415105
#VU126167 - Improper Privilege Management
CVE-2025-5088		 CWE-269 Medium
No
No
 4.31.9M, 4.32.7M, 4.33.5M, 4.34.2F 15.04.2026 SB20260415103
#VU126168 - Improper input validation
CVE-2025-5089		 CWE-20 Medium
No
No
 4.31.9M, 4.32.7M, 4.33.5M, 4.34.2F 15.04.2026 SB20260415103
#VU126169 - Improper input validation
CVE-2025-5090		 CWE-20 Medium
No
No
 4.32.7M, 4.33.5M, 4.34.2F 15.04.2026 SB20260415103
#VU118106 - UNIX Symbolic Link (Symlink) Following
CVE-2025-52565		 CWE-61 Low
No
No
 4.32.9M, 4.34.5M, 4.35.3F 05.11.2025 SB2025110519
SB2025110530
SB2025110545
and 38 more
#VU118105 - UNIX Symbolic Link (Symlink) Following
CVE-2025-52881		 CWE-61 Low
No
No
 4.32.9M, 4.34.5M, 4.35.3F 05.11.2025 SB2025110519
SB2025110530
SB2025110545
and 62 more
#VU118104 - UNIX Symbolic Link (Symlink) Following
CVE-2025-31133		 CWE-61 Low
Available
No
 4.32.9M, 4.34.5M, 4.35.3F 05.11.2025 SB2025110519
SB2025110530
SB2025110545
and 34 more
#VU109298 - Buffer over-read
CVE-2023-24513		 CWE-126 Medium
No
No
 4.26.9M, 4.27.8M, 4.28.5M, 4.29.2F 17.05.2025 SB2023041361
#VU109297 - Resource exhaustion
CVE-2023-24545		 CWE-400 Medium
No
No
 4.26.9M, 4.27.8M, 4.28.5M, 4.29.2F 17.05.2025 SB2023041361
#VU109283 - Improper input validation
CVE-2020-11622		 CWE-20 Medium
No
No
 4.21.11M, 4.22.5M, 4.23.3M, 4.24.0FX, 4.24.1F 17.05.2025 SB2020062530