Vulnerabilities > Arista

DATE CVE VULNERABILITY TITLE RISK
2021-09-09 CVE-2021-28498 Unspecified vulnerability in Arista Metamako Operating System
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user enable passwords set in clear text could result in unprivileged users getting complete access to the systems.
local
low complexity
arista
7.2
2021-09-09 CVE-2021-28499 Insufficiently Protected Credentials vulnerability in Arista Metamako Operating System
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user account passwords set in clear text could leak to users without any password.
local
low complexity
arista CWE-522
2.1
2021-09-09 CVE-2021-28493 Improper Authentication vulnerability in Arista Metamako Operating System
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, a user may be able to execute commands despite not having the privileges to do so.
local
low complexity
arista CWE-287
4.6
2021-09-09 CVE-2021-28494 Improper Authentication vulnerability in Arista Metamako Operating System
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, authentication is bypassed by unprivileged users who are accessing the Web UI.
network
low complexity
arista CWE-287
6.5
2021-09-09 CVE-2021-28495 Improper Authentication vulnerability in Arista Metamako Operating System
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, user authentication can be bypassed when API access is enabled via the JSON-RPC APIs.
network
arista CWE-287
6.8
2021-09-09 CVE-2021-28497 Unspecified vulnerability in Arista Metamako Operating System
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, the bash shell might be accessible to unprivileged users in situations where they should not have access.
local
low complexity
arista
4.6
2020-12-28 CVE-2020-24360 Improper Resource Shutdown or Release vulnerability in Arista EOS
An issue with ARP packets in Arista’s EOS affecting the 7800R3, 7500R3, and 7280R3 series of products may result in issues that cause a kernel crash, followed by a device reload.
low complexity
arista CWE-404
6.1
2020-12-28 CVE-2020-15898 Unspecified vulnerability in Arista EOS
In Arista EOS malformed packets can be incorrectly forwarded across VLAN boundaries in one direction.
network
low complexity
arista
5.0
2020-12-28 CVE-2020-26569 Unspecified vulnerability in Arista EOS
In EVPN VxLAN setups in Arista EOS, specific malformed packets can lead to incorrect MAC to IP bindings and as a result packets can be incorrectly forwarded across VLAN boundaries.
network
arista
4.3
2020-10-26 CVE-2020-15897 Unspecified vulnerability in Arista EOS
Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause traffic loss or incorrect forwarding of traffic via a malformed link-state PDU to the IS-IS router.
network
low complexity
arista
5.0