agentprime: arista-networks-eosEvery new CVE for arista-networks-eos.https://agentprime.io/CVE-2026-73462: On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send mal…https://agentprime.io/advisories/CVE-2026-73462/https://agentprime.io/advisories/CVE-2026-73462/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 19:01:21 GMTCVECVE-2026-73457: Under certain circumstances, the gNPSI client credentials might be logged in clear text, in local or remote accounting logs to authenticated users.https://agentprime.io/advisories/CVE-2026-73457/https://agentprime.io/advisories/CVE-2026-73457/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 18:57:50 GMTCVECVE-2026-73456: Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised swi…https://agentprime.io/advisories/CVE-2026-73456/https://agentprime.io/advisories/CVE-2026-73456/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 18:54:59 GMTCVEcriticalCVE-2026-73442: On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user with sufficient privi…https://agentprime.io/advisories/CVE-2026-73442/https://agentprime.io/advisories/CVE-2026-73442/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 18:50:06 GMTCVECVE-2026-73443: On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is running can capture a legiti…https://agentprime.io/advisories/CVE-2026-73443/https://agentprime.io/advisories/CVE-2026-73443/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 18:47:30 GMTCVECVE-2026-77190: Security Advisory 0177https://agentprime.io/advisories/CVE-2026-77190/https://agentprime.io/advisories/CVE-2026-77190/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 10:08:55 GMTCVECVE-2026-73468: Security Advisory 0175https://agentprime.io/advisories/CVE-2026-73468/https://agentprime.io/advisories/CVE-2026-73468/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 09:55:17 GMTCVECVE-2026-73440: Security Advisory 0178https://agentprime.io/advisories/CVE-2026-73440/https://agentprime.io/advisories/CVE-2026-73440/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 09:55:14 GMTCVECVE-2026-73469: Security Advisory 0176https://agentprime.io/advisories/CVE-2026-73469/https://agentprime.io/advisories/CVE-2026-73469/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 09:55:14 GMTCVECVE-2026-73453: Security Advisory 0174https://agentprime.io/advisories/CVE-2026-73453/https://agentprime.io/advisories/CVE-2026-73453/CVSS 9.5 (Critical). Critical: CVSS score 9.5: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 09:46:33 GMTCVEcriticalCVE-2026-73455: Security Advisory 0173https://agentprime.io/advisories/CVE-2026-73455/https://agentprime.io/advisories/CVE-2026-73455/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 09:46:15 GMTCVECVE-2026-73438: Security Advisory 0172https://agentprime.io/advisories/CVE-2026-73438/https://agentprime.io/advisories/CVE-2026-73438/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 09:38:57 GMTCVECVE-2026-73436: Security Advisory 0171https://agentprime.io/advisories/CVE-2026-73436/https://agentprime.io/advisories/CVE-2026-73436/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 09:19:47 GMTCVECVE-2026-73435: Security Advisory 0171https://agentprime.io/advisories/CVE-2026-73435/https://agentprime.io/advisories/CVE-2026-73435/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 09:19:47 GMTCVECVE-2026-19640: Security Advisory 0170https://agentprime.io/advisories/CVE-2026-19640/https://agentprime.io/advisories/CVE-2026-19640/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 09:11:32 GMTCVECVE-2026-73463: Security Advisory 0169https://agentprime.io/advisories/CVE-2026-73463/https://agentprime.io/advisories/CVE-2026-73463/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 09:02:19 GMTCVECVE-2026-73445: Security Advisory 0167https://agentprime.io/advisories/CVE-2026-73445/https://agentprime.io/advisories/CVE-2026-73445/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 08:58:51 GMTCVECVE-2026-2380: Security Advisory 0168https://agentprime.io/advisories/CVE-2026-2380/https://agentprime.io/advisories/CVE-2026-2380/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 08:48:53 GMTCVECVE-2026-73464: Security Advisory 0166https://agentprime.io/advisories/CVE-2026-73464/https://agentprime.io/advisories/CVE-2026-73464/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 08:32:54 GMTCVECVE-2026-73454: Security Advisory 0165https://agentprime.io/advisories/CVE-2026-73454/https://agentprime.io/advisories/CVE-2026-73454/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 08:14:40 GMTCVECVE-2026-73439: Security Advisory 0164https://agentprime.io/advisories/CVE-2026-73439/https://agentprime.io/advisories/CVE-2026-73439/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 08:09:11 GMTCVECVE-2026-73461: Security Advisory 0163https://agentprime.io/advisories/CVE-2026-73461/https://agentprime.io/advisories/CVE-2026-73461/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 08:01:20 GMTCVEcriticalCVE-2026-73447: Security Advisory 0162 - gNSI Certz/Bootz OS Command Injection via Crafted Rotate Requesthttps://agentprime.io/advisories/CVE-2026-73447/https://agentprime.io/advisories/CVE-2026-73447/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 06:04:25 GMTCVEcriticalCVE-2026-73450: Security Advisory 0161https://agentprime.io/advisories/CVE-2026-73450/https://agentprime.io/advisories/CVE-2026-73450/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 02:32:45 GMTCVECVE-2026-73460: Security Advisory 0160https://agentprime.io/advisories/CVE-2026-73460/https://agentprime.io/advisories/CVE-2026-73460/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 23:20:43 GMTCVECVE-2026-73459: Security Advisory 0160https://agentprime.io/advisories/CVE-2026-73459/https://agentprime.io/advisories/CVE-2026-73459/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 23:16:27 GMTCVECVE-2026-73446: Security Advisory 0160https://agentprime.io/advisories/CVE-2026-73446/https://agentprime.io/advisories/CVE-2026-73446/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 23:08:19 GMTCVECVE-2026-73444: On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP i…https://agentprime.io/advisories/CVE-2026-73444/https://agentprime.io/advisories/CVE-2026-73444/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 21:11:37 GMTCVECVE-2026-73437: On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from…https://agentprime.io/advisories/CVE-2026-73437/https://agentprime.io/advisories/CVE-2026-73437/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 21:02:49 GMTCVECVE-2026-19655: On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with the information option (Option 82), or with the DHCP server configured with mat…https://agentprime.io/advisories/CVE-2026-19655/https://agentprime.io/advisories/CVE-2026-19655/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 20:56:46 GMTCVECVE-2026-73458: On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may…https://agentprime.io/advisories/CVE-2026-73458/https://agentprime.io/advisories/CVE-2026-73458/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 19:30:16 GMTCVEcriticalCVE-2026-73467: On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) servershttps://agentprime.io/advisories/CVE-2026-73467/https://agentprime.io/advisories/CVE-2026-73467/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 18:44:39 GMTCVECVE-2026-73466: On affected platforms running Arista EOS, under certain circumstances plaintext user passwordshttps://agentprime.io/advisories/CVE-2026-73466/https://agentprime.io/advisories/CVE-2026-73466/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 18:41:04 GMTCVECVE-2026-73465: On affected platforms running Arista EOS, under certain circumstances plaintext private keyshttps://agentprime.io/advisories/CVE-2026-73465/https://agentprime.io/advisories/CVE-2026-73465/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 18:36:51 GMTCVECVE-2026-19641: On affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan authentication sessions. Repeated exploitation of this issue can exhau…https://agentprime.io/advisories/CVE-2026-19641/https://agentprime.io/advisories/CVE-2026-19641/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 18:17:55 GMTCVECVE-2026-73451: On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces (SVI) in shared mode, restarting of the secondary switchcard f…https://agentprime.io/advisories/CVE-2026-73451/https://agentprime.io/advisories/CVE-2026-73451/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 18:12:44 GMTCVECVE-2026-75945: A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued.https://agentprime.io/advisories/CVE-2026-75945/https://agentprime.io/advisories/CVE-2026-75945/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 22:23:02 GMTCVECVE-2026-75944: A race condition during supplicant re-authentication may leave a stale ACL entry that persists in the system. If the AclAgent subsequently restarts, this stale entry may be applied to new supplicants…https://agentprime.io/advisories/CVE-2026-75944/https://agentprime.io/advisories/CVE-2026-75944/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 22:19:19 GMTCVECVE-2026-75943: A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this windo…https://agentprime.io/advisories/CVE-2026-75943/https://agentprime.io/advisories/CVE-2026-75943/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 22:11:53 GMTCVECVE-2026-77191: All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with 802.1X authentication and authorization enabled and Access Control Lists (ACLs) configured for per-supplic…https://agentprime.io/advisories/CVE-2026-77191/https://agentprime.io/advisories/CVE-2026-77191/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 22:06:28 GMTCVECVE-2026-73449: On affected platforms running Arista EOS with both 802.1X port authentication and the RADIUS proxy feature configured with dynamic authorization, a low-privileged attacker on an adjacent network segm…https://agentprime.io/advisories/CVE-2026-73449/https://agentprime.io/advisories/CVE-2026-73449/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 21:57:39 GMTCVECVE-2026-2379: Arista EOS IPsec Tunnel Sequence Number Mismatch via Interface Flaps when Anti-Replay is Disabledhttps://agentprime.io/advisories/CVE-2026-2379/https://agentprime.io/advisories/CVE-2026-2379/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Jun 2026 17:59:40 GMTCVECVE-2026-7473: Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypasshttps://agentprime.io/advisories/CVE-2026-7473/https://agentprime.io/advisories/CVE-2026-7473/CVSS 6.9 (Medium). Critical: In CISA’s KEV catalogue since 9 Jun 2026: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Jun 2026 16:22:47 GMTCVEcriticalKEVCVE-2025-8873: Arista EOS Dataplane Denial of Service via Malformed IPsec Packethttps://agentprime.io/advisories/CVE-2025-8873/https://agentprime.io/advisories/CVE-2025-8873/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Jun 2026 23:04:56 GMTCVECVE-2023-5502: On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, a malicious supplicant may bypass authentication.https://agentprime.io/advisories/CVE-2023-5502/https://agentprime.io/advisories/CVE-2023-5502/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Jun 2026 22:39:34 GMTCVECVE-2024-27892: On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (SSL Profiles Enabled).https://agentprime.io/advisories/CVE-2024-27892/https://agentprime.io/advisories/CVE-2024-27892/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Jun 2026 22:33:15 GMTCVECVE-2024-27890: On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (No SSL Profiles Enabled).https://agentprime.io/advisories/CVE-2024-27890/https://agentprime.io/advisories/CVE-2024-27890/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Jun 2026 22:27:36 GMTCVECVE-2024-27891: On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports.https://agentprime.io/advisories/CVE-2024-27891/https://agentprime.io/advisories/CVE-2024-27891/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Jun 2026 22:08:42 GMTCVECVE-2024-6858: In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN.https://agentprime.io/advisories/CVE-2024-6858/https://agentprime.io/advisories/CVE-2024-6858/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Jun 2026 21:51:08 GMTCVECVE-2025-7048: On affected platforms running Arista EOS with MACsec configuration, a specially crafted packet can cause the MACsec process to terminate unexpectedly. Continuous receipt of these packets with certain…https://agentprime.io/advisories/CVE-2025-7048/https://agentprime.io/advisories/CVE-2025-7048/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Jan 2026 19:15:44 GMTCVE