Known vulnerabilities in Arista Extensible Operating System (EOS) - page 2
Vendor:
Arista Networks
Software:
Arista Extensible Operating System (EOS)
Software CPE:
cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*
Website:
https://www.arista.com/en/
Total vulnerabilities:
64
Public exploits:
6
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
4.36.2F
4.32.11M
4.33.8M
4.34.6M
4.35.4M
4.33.9M
4.34.8M
4.35.6M
4.36.1F
4.31.10M
4.32.8M
4.33.6M
4.34.4M
4.35.0F
4.32.9M
4.34.5M
4.35.3F
4.31.9M
4.32.7M
4.33.5M
4.34.2F
4.31.8M
4.32.6M
4.33.4M
4.34.1F
4.30.10
4.31.7
4.32.5
4.33.3F
4.33.2.1F
4.33.3M
4.30.0M
4.27.10M
4.28.7M
4.25.2F
4.24.5M
4.23.7M
4.22.9M
4.21.14M
4.20.14M
4.21.2.4F
4.22.0.2F
4.23.0F
4.24.0.FX-KC
4.21.11M
4.22.5M
4.23.4M
4.24.1F
4.23.2F
4.22.4M
4.21.9M
4.17
4.21.2.7F
4.21.6.4F
4.23.6M
4.22.8M
4.24.2.2F
4.22.7.1M
4.21.13M
4.21.12M
4.24.2F
4.18.10M
4.19.10M
4.20.9M
4.21.1F
4.21.2.3F
4.22.7M
4.23.5M
4.24.3M
4.25.0F
4.26.2
4.25.5
4.21.15M
4.22.12M
4.23.9M
4.24.7M
4.25.4.1M
4.25.5M
4.26.2F
4.23.10
4.24.8
4.25.6
4.26.3
4.25.7M
4.27.2F
4.27.1F
4.26.4M
4.26.10M
4.27.9M
4.28.0
4.25.1F
4.26.0F
4.27.0F
4.28.0F
4.29.0F
4.30.0F
4.29.2F
4.28.6M
4.22.13M
4.23.13M
4.26.8M
4.28.3M
4.29
4.19.12.1M
4.18.11M
4.23.12
4.25.9
4.27.4
4.27.2
4.26.6
4.25.8
4.24.10
4.24.11M
4.25.10M
4.26.9M
4.27.7M
4.28.4M
4.29.7M
4.30.5M
4.32.0F
4.31.2F
4.30.6M
4.28.11M
4.29.8M
4.30.7M
4.31.3M
4.32.1F
4.28.12M
4.29.9M
4.32.2F
4.30.8M
4.31.5M
4.33.1
4.33.0M
4.28.13
4.29.10
4.30.9
4.31.6
4.32.4
4.33.2
4.31.6M
4.32.4M
4.33.1F
4.29.10M
4.30.9M
4.32.3M
4.33.0F
4.33.2F
4.32.5M
4.31.7M
4.30.10M
Vulnerabilities (64)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU113161 - Authentication Bypass Using an Alternate Path or Channel CVE-2025-6188 |
CWE-288 | Medium | 4.30.10, 4.31.7, 4.32.5, 4.33.2 | 22.07.2025 |
SB2025072257 |
||
| #VU109873 - Improper Access Control CVE-2025-2826 |
CWE-284 | Low | 4.33.2.1F, 4.33.3F | 27.05.2025 |
SB2025052768 |
||
| #VU109872 - Improper Access Control CVE-2025-2796 |
CWE-284 | Medium | 4.33.3M | 27.05.2025 |
SB2025052767 |
||
| #VU109588 - Protection Mechanism Failure CVE-2024-11185 |
CWE-693 | Medium | 4.30.10M, 4.31.7M, 4.32.5M, 4.33.2F | 21.05.2025 |
SB2025052199 |
||
| #VU109388 - Cleartext Transmission of Sensitive Information CVE-2024-12378 |
CWE-319 | Medium | 4.29.10M, 4.30.9M, 4.31.7M, 4.32.3M, 4.33.0F | 17.05.2025 |
SB2025051729 |
||
| #VU109387 - Protection Mechanism Failure CVE-2024-9448 |
CWE-693 | Medium | 4.30.9M, 4.31.6M, 4.32.4M, 4.33.1F | 17.05.2025 |
SB2025051728 |
||
| #VU109386 - Improper Access Control CVE-2025-1260 |
CWE-284 | Medium | 4.28.13, 4.29.10, 4.30.9, 4.31.6, 4.32.4, 4.33.2 | 17.05.2025 |
SB2025051727 |
||
| #VU109385 - Improper Access Control CVE-2025-1259 |
CWE-284 | Medium | 4.28.13, 4.29.10, 4.30.9, 4.31.6, 4.32.4, 4.33.2 | 17.05.2025 |
SB2025051727 |
||
| #VU109384 - Protection Mechanism Failure CVE-2024-8000 |
CWE-693 | Medium | 4.30.9M, 4.31.6M, 4.32.5M, 4.33.0M | 17.05.2025 |
SB2025051726 |
||
| #VU109383 - Missing release of memory after effective lifetime CVE-2024-9135 |
CWE-401 | Medium | 4.29.10, 4.30.9, 4.31.6, 4.32.4, 4.33.1 | 17.05.2025 |
SB2025051725 |
||
| #VU109382 - Missing release of memory after effective lifetime CVE-2024-7095 |
CWE-401 | Low | 4.30.8M, 4.31.5M, 4.32.3M | 17.05.2025 |
SB2025051724 |
||
| #VU109381 - Resource Management Errors CVE-2024-6437 |
CWE-399 | Medium | 4.29.10M, 4.30.8M, 4.31.5M, 4.32.2F | 17.05.2025 |
SB2025051723 |
||
| #VU109380 - Improper input validation CVE-2024-5872 |
CWE-20 | Medium | 4.28.12M, 4.29.9M, 4.30.8M, 4.31.5M, 4.32.3M, 4.33.0F | 17.05.2025 |
SB2025051722 |
||
| #VU109369 - Security Features CVE-2024-27891 |
CWE-254 | Medium | 4.28.11M, 4.29.8M, 4.30.7M, 4.31.3M, 4.32.1F | 17.05.2025 |
SB2025051718 |
||
| #VU109368 - Missing Authentication for Critical Function CVE-2024-27890 |
CWE-306 | Medium | 4.28.11M, 4.29.8M, 4.30.0M | 17.05.2025 |
SB2025051717 |
||
| #VU109367 - Missing Authentication for Critical Function CVE-2024-27892 |
CWE-306 | Medium | 4.28.11M, 4.29.8M, 4.30.6M, 4.31.3M | 17.05.2025 |
SB2025051717 |
||
| #VU109366 - Improper Authentication CVE-2024-6858 |
CWE-287 | Low | 4.28.11M, 4.29.8M, 4.30.6M, 4.31.2F | 17.05.2025 |
SB2025051716 |
||
| #VU109363 - Improper Authentication CVE-2023-5502 |
CWE-287 | Medium | 4.29.7M, 4.30.5M, 4.31.3M, 4.32.0F | 17.05.2025 |
SB2025051713 |
||
| #VU109238 - Information Exposure Through Log Files CVE-2025-0936 |
CWE-532 | Medium | 4.30.10M, 4.31.7M, 4.32.5M, 4.33.2F | 16.05.2025 |
SB2025051602 |
||
| #VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2024-6387 |
CWE-362 | High | 4.32.2F | 01.07.2024 |
SB2024070144 SB2024070145 SB2024070152 and 89 more |
Showing elements 21 - 40 out of 64