Vulnerabilities > Arista > EOS > 4.25.0
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-06-05 | CVE-2023-24510 | Improper Handling of Exceptional Conditions vulnerability in Arista EOS On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart. | 7.5 |
| 2023-04-13 | CVE-2023-24509 | Unspecified vulnerability in Arista EOS On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login to the standby supervisor as a root user, leading to a privilege escalation. | 7.8 |
| 2023-01-26 | CVE-2021-28510 | Improper Validation of Specified Quantity in Input vulnerability in Arista EOS For certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invalid Type-Length-Value (TLV) causes the PTP agent to restart. | 7.5 |
| 2022-01-14 | CVE-2021-28500 | Unspecified vulnerability in Arista EOS An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration. | 7.8 |
| 2021-01-20 | CVE-2020-25686 | Improperly Implemented Security Check for Standard vulnerability in multiple products A flaw was found in dnsmasq before version 2.83. | 3.7 |
| 2021-01-20 | CVE-2020-25685 | Inadequate Encryption Strength vulnerability in multiple products A flaw was found in dnsmasq before version 2.83. | 3.7 |
| 2021-01-20 | CVE-2020-25684 | A flaw was found in dnsmasq before version 2.83. | 3.7 |