Product by Arista Networks
Arista EOS
108 known vulnerabilities in Arista EOS (Arista Networks), 3 of them actively exploited (CISA KEV).
Key figures
108
Vulnerabilities
3
Actively exploited (KEV)
0
Used by ransomware
18
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2014-6271 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability In CISA KEValso in 65 other products | 9.8 | |
| Critical | CVE-2014-7169 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability In CISA KEValso in 65 other products | 9.8 | |
| Critical | CVE-2026-7473 | Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass In CISA KEValso in 1 other product | 5.8 | |
| Critical | CVE-2017-14491 | thekelleys dnsmasq: Heap-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2020-10188 | Netkit Telnet: Buffer Overflow | 9.8 | |
| Critical | CVE-2017-18017 | SUSE Linux Enterprise Debuginfo: Use-After-Free | 9.8 | |
| High | CVE-2024-6387 | Openssh: regresshion - race condition in ssh allows rce/dos | 8.1 | |
| High | CVE-2024-27889 | Arista Edge Threat Management - Arista NG Firewall (NGFW): SQL Injection | 8.8 | |
| High | CVE-2019-17596 | Arista CloudVision Portal: security vulnerability | 7.5 | |
| High | CVE-2015-6855 | QEMU: Denial of Service | 7.5 | |
| Critical | CVE-2026-73456 | Arista Networks EOS: Code Injection | 10.0 | |
| Critical | CVE-2026-73453 | Security Advisory 0174 | 10.0 | |
| Critical | CVE-2026-73447 | Security Advisory 0162 - gNSI Certz/Bootz OS Command Injection via Crafted Rotate Request | 9.1 | |
| Medium | CVE-2015-5239 | QEMU: Integer Overflow | 6.5 | |
| Medium | CVE-2015-5745 | QEMU: Buffer Overflow | 6.5 | |
| High | CVE-2026-73464 | Security Advisory 0166 | 8.8 | |
| Critical | CVE-2021-28506 | Arista Networks EOS: Improper Authorization | 9.1 | |
| Medium | CVE-2015-5278 | QEMU: Infinite Loop | 6.5 | |
| Low | CVE-2020-25686 | Dnsmasq: Improperly Implemented Security Check for Standard | 3.7 | |
| High | CVE-2026-73455 | Security Advisory 0173 | 7.5 | |
| Low | CVE-2020-25684 | Dnsmasq: Improperly Implemented Security Check for Standard | 3.7 | |
| Critical | CVE-2026-73461 | Security Advisory 0163 | 8.0 | |
| Critical | CVE-2026-73458 | Arista Networks EOS: Incorrect Implementation of Authentication Algorithm | 8.2 | |
| Critical | CVE-2026-86106 | Security Advisory 0179 | 9.6 | |
| High | CVE-2026-73454 | Security Advisory 0165 | 8.1 |
News
- NCSC-2026-0366 [1.00] [M/H] Kwetsbaarheden verholpen in Arista EOSncsc-nl,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 23sans-atrisk-mail,
- SSA-446545 V1.0: Impact of RegreSSHion (CVE-2024-6387) in Siemens Industrial Productssiemens-productcert
- SSA-646763 V1.0: DNSpooq - Dnsmasq Vulnerabilities in SCALANCE and RUGGEDCOM Devicessiemens-productcert