Known vulnerabilities in Arista Extensible Operating System (EOS) - page 3

Software CPE: cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*
Total vulnerabilities: 64
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Arista Extensible Operating System (EOS) Arista Extensible Operating System (EOS) is affected by 64 known vulnerabilities: 4 high, 42 medium, 18 low Critical High Medium Low

Vulnerabilities (64)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109364 - Improper Privilege Management
CVE-2023-24509
CWE-269 Low
No
No
4.24.11M, 4.25.10M, 4.26.9M, 4.27.7M, 4.28.4M 17.05.2025 SB2023121484
#VU109359 - Out-of-bounds read
CVE-2023-3646
CWE-125 Medium
No
No
4.28.6M, 4.29.2F 17.05.2025 SB2023082957
#VU109358 - Buffer overflow
CVE-2023-24548
CWE-120 Medium
No
No
4.25.1F, 4.26.0F, 4.27.0F, 4.28.0F, 4.29.0F, 4.30.0F 17.05.2025 SB2023082455
#VU109357 - Security Features
CVE-2021-28511
CWE-254 Medium
No
No
4.24.10, 4.25.9, 4.26.6, 4.27.4, 4.28.0 17.05.2025 SB20230719127
#VU109306 - Improper Access Control
CVE-2023-24512
CWE-284 Low
No
No
4.26.10M, 4.27.9M, 4.28.6M, 4.29.2F 17.05.2025 SB2023042448
#VU109305 - Improper input validation
CVE-2023-24510
CWE-20 Medium
No
No
4.26.10M, 4.27.10M, 4.28.7M, 4.29.2F, 4.30.0F 17.05.2025 SB2023053161
#VU109304 - Missing release of memory after effective lifetime
CVE-2023-24511
CWE-401 Medium
No
No
4.26.10M, 4.27.9M, 4.28.6M, 4.29.2F 17.05.2025 SB2023041756
#VU109303 - Improper Authorization
CVE-2021-28503
CWE-285 High
No
No
4.23.10, 4.24.8, 4.25.6, 4.26.3 17.05.2025 SB2022020232
#VU109302 - Improper Access Control
CVE-2021-28504
CWE-284 Medium
No
No
4.25.7M, 4.26.4M, 4.27.2F 17.05.2025 SB2022040647
#VU109301 - Improper Access Control
CVE-2021-28505
CWE-284 Medium
No
No
4.26.4M, 4.27.1F 17.05.2025 SB2022033054
#VU109296 - Exposure of sensitive information to an unauthorized actor
CVE-2021-28496
CWE-200 Medium
No
No
4.23.10, 4.24.8, 4.25.5, 4.26.2 17.05.2025 SB2021101986
#VU109295 - Improper input validation
CVE-2020-24360
CWE-20 Medium
No
No
4.22.7M, 4.23.5M, 4.24.3M, 4.25.0F 17.05.2025 SB2020121748
#VU109293 - Improper input validation
CVE-2020-15897
CWE-20 Medium
No
No
4.21.12M, 4.22.7M, 4.23.5M, 4.24.2F 17.05.2025 SB2020100822
#VU109292 - Improper input validation
CVE-2020-26568
CWE-20 Medium
No
No
4.21.13M, 4.22.7.1M, 4.23.5M, 4.24.2.2F, 4.24.3M, 4.25.0F 17.05.2025 SB2020121923
#VU109291 - Improper input validation
CVE-2020-26569
CWE-20 Low
No
No
4.21.13M, 4.22.8M, 4.23.6M, 4.24.3M, 4.25.0F 17.05.2025 SB2020121922
#VU109290 - Improper input validation
CVE-2020-15898
CWE-20 Medium
No
No
4.21.2.7F, 4.21.6.4F, 4.21.12M, 4.22.7M, 4.23.5M, 4.24.2.2F, 4.24.3M, 4.25.0F 17.05.2025 SB2020121921
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778
CWE-835 Medium
Available
No
4.23.12, 4.24.10, 4.25.9, 4.26.6, 4.27.4 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU49845 - Insufficient Verification of Data Authenticity
CVE-2020-25686
CWE-345 Low
Available
No
4.21.14M, 4.22.9M, 4.23.7M, 4.24.5M, 4.25.2F 20.01.2021 SB2021012070
SB20210120108
SB20210120122
and 27 more
#VU49844 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-25685
CWE-327 Low
Available
No
4.21.14M, 4.22.9M, 4.23.7M, 4.24.5M, 4.25.2F 20.01.2021 SB2021012070
SB20210120107
SB20210120122
and 27 more
#VU49843 - Insufficient Verification of Data Authenticity
CVE-2020-25684
CWE-345 Low
Available
No
4.21.14M, 4.22.9M, 4.23.7M, 4.24.5M, 4.25.2F 20.01.2021 SB2021012070
SB20210120106
SB20210120122
and 27 more


Showing elements 41 - 60 out of 64