<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: arista-networks-arista-eos</title><description>Every new CVE for arista-networks-arista-eos.</description><link>https://agentprime.io/</link><item><title>CVE-2023-24510: On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.</title><link>https://agentprime.io/advisories/CVE-2023-24510/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-24510/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Jun 2023 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-24509: On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login…</title><link>https://agentprime.io/advisories/CVE-2023-24509/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-24509/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Apr 2023 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2021-28509: TerminAttr streams MACsec sensitive data in clear text to other authorized users in CVP</title><link>https://agentprime.io/advisories/CVE-2021-28509/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-28509/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 May 2022 19:50:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-28508: TerminAttr streams IPsec sensitive data in clear text to other authorized users in CVP</title><link>https://agentprime.io/advisories/CVE-2021-28508/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-28508/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 May 2022 19:48:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-28503: In Arista&apos;s EOS software affected releases, eAPI might skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI.</title><link>https://agentprime.io/advisories/CVE-2021-28503/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-28503/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Feb 2022 22:29:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-28500: An issue has recently been discovered in Arista EOS where the incorrect use of EOS&apos;s AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local user…</title><link>https://agentprime.io/advisories/CVE-2021-28500/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-28500/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Jan 2022 19:11:36 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2021-28496: In Arista&apos;s EOS software affected releases, the shared secret profiles sensitive configuration might be leaked when displaying output over eAPI or other JSON outputs to authenticated users on the dev…</title><link>https://agentprime.io/advisories/CVE-2021-28496/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-28496/</guid><description>CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 21 Oct 2021 16:41:47 GMT</pubDate><category>CVE</category></item></channel></rss>