# Arista Networks EOS. Every CVE that names Arista Networks EOS among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [On affected platforms running Arista EOS with BGP Link State configured, BGP peer flap can cause the BGP agent to leak memory. This may result in BGP routing processing being terminated and route fla…](https://agentprime.io/advisories/CVE-2024-9135.md) `CVE-2024-9135` · CVE record: Arista Networks EOS · CVSS 5.3 Medium · Not analysed yet · Published 4 Mar 2025 · Tags: Denial of service - [On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected.](https://agentprime.io/advisories/CVE-2025-1260.md) `CVE-2025-1260` · CVE record: Arista Networks EOS · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Mar 2025 · Tags: Broken access control - [On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected.](https://agentprime.io/advisories/CVE-2025-1259.md) `CVE-2025-1259` · CVE record: Arista Networks EOS · CVSS 7.7 High · Not analysed yet · Published 4 Mar 2025 · Tags: Broken access control - [On affected platforms running Arista EOS, a specially crafted packet with incorrect VLAN tag might be copied to CPU, which may cause incorrect control plane behavior related to the packet, such as ro…](https://agentprime.io/advisories/CVE-2024-5872.md) `CVE-2024-5872` · CVE record: Arista Networks EOS · CVSS 6.5 Medium · Not analysed yet · Published 10 Jan 2025 - [On affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under some circumstances a specially crafted packet can cause the snmpd process to lea…](https://agentprime.io/advisories/CVE-2024-7095.md) `CVE-2024-7095` · CVE record: Arista Networks EOS · CVSS 4.3 Medium · Not analysed yet · Published 10 Jan 2025 · Tags: Denial of service - [On affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel panic and cause system reload.](https://agentprime.io/advisories/CVE-2023-3646.md) `CVE-2023-3646` · CVE record: Arista Networks EOS · CVSS 5.9 Medium · Not analysed yet · Published 29 Aug 2023 · Tags: Memory corruption - [On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward pa…](https://agentprime.io/advisories/CVE-2023-24548.md) `CVE-2023-24548` · CVE record: Arista Networks EOS · CVSS 5.3 Medium · Not analysed yet · Published 29 Aug 2023 · Tags: Memory corruption - [On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch.](https://agentprime.io/advisories/CVE-2023-24545.md) `CVE-2023-24545` · CVE record: Arista Networks EOS · CVSS 7.5 High · Not analysed yet · Published 12 Apr 2023 · Tags: Denial of service - [On affected platforms running Arista CloudEOS a size check bypass issue in the Software Forwarding Engine (Sfe) may allow buffer over reads in later code. Additionally, depending on configured option…](https://agentprime.io/advisories/CVE-2023-24513.md) `CVE-2023-24513` · CVE record: Arista Networks EOS · CVSS 6.5 Medium · Not analysed yet · Published 12 Apr 2023 · Tags: CWE-126 - [On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process.](https://agentprime.io/advisories/CVE-2023-24511.md) `CVE-2023-24511` · CVE record: Arista Networks EOS · CVSS 5.3 Medium · Not analysed yet · Published 12 Apr 2023 · Tags: Denial of service - [For certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invalid Type-Length-Value (TLV) causes the PTP agent to restart. Repeated restarts of…](https://agentprime.io/advisories/CVE-2021-28510.md) `CVE-2021-28510` · CVE record: Arista Networks EOS · CVSS 5.3 Medium · Not analysed yet · Published 24 Jan 2023 · Tags: Denial of service - [This advisory documents the impact of an internally found vulnerability in Arista EOS for security ACL bypass. The impact of this vulnerability is that the security ACL drop rule might be bypassed if…](https://agentprime.io/advisories/CVE-2021-28511.md) `CVE-2021-28511` · CVE record: Arista Networks EOS · CVSS 5.8 Medium · Not analysed yet · Published 5 Aug 2022 · Tags: Broken access control - [On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL rules in that access…](https://agentprime.io/advisories/CVE-2021-28505.md) `CVE-2021-28505` · CVE record: Arista Networks EOS · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2022 · Tags: Broken access control - [On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent rules ( rules decla…](https://agentprime.io/advisories/CVE-2021-28504.md) `CVE-2021-28504` · CVE record: Arista Networks EOS · CVSS 7.5 High · Not analysed yet · Published 1 Apr 2022 · Tags: Broken access control - [An issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for OpenConfig gNOI and OpenConfig RESTCONF might be bypassed, which results in the den…](https://agentprime.io/advisories/CVE-2021-28507.md) `CVE-2021-28507` · CVE record: Arista Networks EOS · CVSS 5.5 Medium · Not analysed yet · Published 14 Jan 2022 · Tags: Broken access control - [An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device.](https://agentprime.io/advisories/CVE-2021-28506.md) `CVE-2021-28506` · CVE record: Arista Networks EOS · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jan 2022 · Tags: Broken access control Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .