<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="/custom_data/rss_style/rss.xsl"?>
<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/">
  <channel>
    <title>Arista Networks :: Security Advisories</title>
		<description><![CDATA[Arista Networks :: Security Advisories]]></description>
		<link>https://www.arista.com/en/support/advisories-notices/security-advisory</link>
		<lastBuildDate>Sun, 13 Sep 2026 10:46:19 +0000</lastBuildDate>
		<atom:link rel="self" type="application/rss+xml" href="https://www.arista.com/en/support/advisories-notices/security-advisory-csaf"/>
		<language>en-gb</language>
		<copyright>© 2026 Arista Networks, Inc. All rights reserved.</copyright>
		<managingEditor>webadmin@arista.com (Web Admin)</managingEditor>
		<item>
			<title>Security Advisory 0145</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_145_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_145_CSAF.json</guid>
			<description><![CDATA[
Date: July 27, 2026 



Revision
Date
Changes


1.0
July 27, 2026
Initial release


1.1
August 10, 2026
Added CSAF JSON file for download



 
Description: SQL injection in a flow metrics API method enabling server-side request forgery CVE: CVE-2026 -17191 CVSSv3.1 Base Score: 9.1 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) CVSSv4.0 Base Score: 8.5 (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L/S:P) Common Weakness Enumeration: CWE-89 Improper Neutrali ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 27 Jul 2026 05:01:22 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0144</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_144_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_144_CSAF.json</guid>
			<description><![CDATA[
Date: July 27, 2026



Revision
Date
Changes


1.0
July 27, 2026
Initial release


1.1
August 3, 2026
Updated Affected Platforms to include: VeloCloud Orchestrator Hosted


1.2
August 10, 2026
Added CSAF JSON file for download



 
The CVE-ID tracking this issue: CVE-2026-16812 CVSSv3.1 Base Score: 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) CVSSv4.0 Base Score: 10.0 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P) Common Weakness Enumerat ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 27 Jul 2026 04:59:42 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0143</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_143_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_143_CSAF.json</guid>
			<description><![CDATA[
Date: June 23, 2026



Revision
Date
Changes


1.0
Jun 23, 2026
Initial release


1.1
Jul 24, 2026
Clarification of certain details


1.2
August 10, 2026
Added CSAF JSON file for download



Description
All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with the Streaming Telemetry Agent (aka TerminAttr) enabled. This issue primarily affects customers using the Streaming Telemetry Agent to connect to CloudVision or a gNMI server.
 ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 23 Jun 2026 00:37:30 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0142</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_142_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_142_CSAF.json</guid>
			<description><![CDATA[
Date: June 23, 2026



Revision
Date
Changes


1.0
June 23, 2026
Initial release


1.1
July 8, 2026
Updated Resolution and Mitigation sections


1.2
August 10, 2026
Added CSAF JSON file for download



The CVE-ID tracking this issue: CVE-2026-12546 CVSSv3.1 Base Score: 6.0 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L)CVSSv4.0 Base Score: 5.1 (CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:L/SI:L/SA:L) Common Weakness Enumeration: CWE-288: Authentication Bypass Us ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 23 Jun 2026 00:35:10 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0141</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_141_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_141_CSAF.json</guid>
			<description><![CDATA[
Date: June 16, 2026
 
 



Revision
Date
Changes


1.0
June 16, 2026
Initial release


1.1
August 10, 2026
Added CSAF JSON file for download



CVSSv3.1 Base Score: 8.2 (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) CVSSv4.0 Base Score: 5.3 (CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N) Common Weakness Enumeration: CWE-653 (Insufficient Compartmentalization)
 
This vulnerability is being tracked by BUG 1787021
Description
The purpose of this advisor ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 15 Jun 2026 21:20:27 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0137</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_137_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_137_CSAF.json</guid>
			<description><![CDATA[
Date: May 5, 2026



Revision
Date
Changes


1.0
May 5, 2026
Initial release


1.1
May 7, 2026
Clarified 7280R3, 7500R3 and 7800R3 exposure is limited


1.2
May 13, 2026
Updated Mitigation section with a note of caution


1.3
May 20, 2026
Updated Approach 2 - Applying ACL on Decapsulation Switches


1.4
August 10, 2026
Added CSAF JSON file for download



The CVE-ID tracking this issue: CVE-2026-7473 CVSSv3.1 Base Score: 5.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/ ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 05 May 2026 03:41:31 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0134</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_134_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_134_CSAF.json</guid>
			<description><![CDATA[
 
Date: February 17, 2026
 



Revision
Date
Changes


1.0
February 17, 2026
Initial release


1.1
August 10, 2026
Added CSAF JSON file for download



The CVE-ID tracking this issue: CVE-2026-2379 CVSSv3.1 Base Score: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)Common Weakness Enumeration: CWE-672: Operation on a Resource after Expiration or Release This vulnerability is being tracked by BUG 1188976
Description
On affected platforms with hardware IPSec support ru ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 17 Feb 2026 01:17:46 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0132</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_132_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_132_CSAF.json</guid>
			<description><![CDATA[
Date: December 30, 2025
 



Revision
Date
Changes


1.0
December 30, 2025
Initial release


1.1
February 3, 2026
Updated Required Configuration for Exploitation



The CVE-ID tracking this issue: CVE-2025-7048 CVSS:3.1 Base Score 4.3 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) CVSS:4.0 Base Score 5.3 (CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-805 Buffer Access with Incorrect Length Value This vulnerability is bein ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 29 Dec 2025 21:55:09 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0127</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_127_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_127_CSAF.json</guid>
			<description><![CDATA[
Date: November 18, 2025
 



Revision
Date
Changes


1.0
November 18, 2025
Initial release



The CVE-ID tracking this issue: CVE-2025-8873 CVSSv3.1 Base Score: 7.5(CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)CVSSv4.0 Base Score 8.7(CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N)
Common Weakness Enumeration: CWE-1286: Improper Validation of Syntactic Correctness of InputThis vulnerability is being tracked by BUG 1246592
Description
On affected platforms run ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 17 Nov 2025 22:44:11 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0126</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_126_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_126_CSAF.json</guid>
			<description><![CDATA[
Date: November 18, 2025



Revision
Date
Changes


1.0
November 18, 2025
Initial release



The following issues were discovered during regular penetration testing of Arista’s EOS. Issues detailed cover CloudVision Exchange (CVX) based features including Media Control Services (MCS).
Issues covered in this Advisory:

CVE-2025-5088 - An authenticated Redis session could be used to obtain full root access to all servers in the CVX cluster
CVE-2025-5089 - Malformed messages rec ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 17 Nov 2025 22:36:51 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0125</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_125_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_125_CSAF.json</guid>
			<description><![CDATA[
Date: November 11, 2025



Revision
Date
Changes


1.0
November 11, 2025
Initial release



The CVE-ID tracking this issue: CVE-2025-8870 CVSS:3.1 Base Score 4.9 (CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H) CVSS:4.0 Base Score 5.6 (CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H) Common Weakness Enumeration: CWE-248: Uncaught Exception This vulnerability is being tracked by BUG 1206724
Description
On affected platforms running Arista EOS, certain serial conso ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 11 Nov 2025 06:29:22 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0122</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_122_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_122_CSAF.json</guid>
			<description><![CDATA[
Date: July 22, 2025



Revision
Date
Changes


1.0
July 22, 2025
Initial release


1.1
September 30, 2025
Added CSAF File



The CVE-ID tracking this issue: CVE-2025-3456 CVSSv3.1 Base Score: 3.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Common Weakness Enumeration: CWE-532: Insertion of Sensitive Information into Log File This vulnerability is being tracked by BUG1114420
Description
On affected platforms running Arista EOS, the global common encryption key configura ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 22 Jul 2025 00:09:35 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0121</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_121_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_121_CSAF.json</guid>
			<description><![CDATA[
Date: July 22, 2025
 



Revision
Date
Changes


1.0
July 22, 2025
Initial release


1.1
August 8, 2025
Updated Mitigation sectionUpdated EOS versions which CVE-2025-6188 has been fixed


1.2
September 30, 2025
Added CSAF file



The CVE-ID tracking this issue: CVE-2025-6188 CVSSv3.1 Base Score: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Common Weakness Enumeration: CWE-288 Authentication Bypass Using an Alternate Path or Channel This vulnerability is being tr ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 22 Jul 2025 00:08:44 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0120</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_120_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_120_CSAF.json</guid>
			<description><![CDATA[
Date: May 27, 2025



Revision
Date
Changes


1.0
May 27, 2025
Initial release



The CVE-ID tracking this issue: CVE-2025-2826 CVSSv3.1 Base Score: 2.6 (CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N) Common Weakness Enumeration: CWE-284: Improper Access Control This vulnerability is being tracked by BUG 795398.
Description
On affected platforms running Arista EOS, ACL policies may not be enforced. IPv4 ingress ACL, MAC ingress ACL, or IPv6 standard ingress ACL enabled on one o ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 27 May 2025 15:22:08 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0119</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_119_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_119_CSAF.json</guid>
			<description><![CDATA[
Date: May 27, 2025



Revision
Date
Changes


1.0
May 27, 2025
Initial release


1.1
June 4, 2025
Updated Resolutions Section and Affected EOS Version



The CVE-ID tracking this issue: CVE-2025-2796 CVSSv3.1 Base Score: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Common Weakness Enumeration: CWE-284: Improper Access Control This vulnerability is being tracked by BUG1073719
Description
On affected platforms with hardware IPSec support running Arista EOS with IPsec  ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 27 May 2025 15:21:23 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0118</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_118_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_118_CSAF.json</guid>
			<description><![CDATA[
Date: May 20, 2025  



Revision
Date
Changes


1.0
May 20, 2025
Initial release



The CVE-ID tracking this issue: CVE-2024-11185 CVSSv3.1 Base Score: 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Common Weakness Enumeration: CWE-1189: Improper Isolation of Shared Resources on System-on-a-Chip (SoC) This vulnerability is being tracked by BUG1009562
Description
On affected platforms running Arista EOS, ingress traffic on Layer 2 ports may, under certain conditions, be imp ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 20 May 2025 17:56:46 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0117</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_117_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_117_CSAF.json</guid>
			<description><![CDATA[
Date: May 6, 2025



Revision
Date
Changes


1.0
May 6, 2025
Initial release


1.1
May 20, 2025
Updated affected Arista productsUpdated mitigation option #3



The CVE-ID tracking this issue: CVE-2025-0936 CVSSv3.1 Base Score: 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Common Weakness Enumeration: CWE-256: Plaintext Storage of a Password This vulnerability is being tracked by BUG 1045796
Description
On affected platforms running Arista EOS with a gNMI transport en ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 05 May 2025 23:58:07 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0115</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_115_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_115_CSAF.json</guid>
			<description><![CDATA[
Date: April 15, 2025



Revision
Date
Changes


1.0
April 15, 2025
Initial release



The CVE-ID tracking this issue: CVE-2025-0505 CVSSv3.1 Base Score: 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) Common Weakness Enumeration:CWE- CWE-269: Improper Privilege Management This vulnerability is being tracked by BUG 1046170
Description
On Arista CloudVision systems (virtual or physical on-premise deployments), Zero Touch Provisioning can be used to gain admin privileges on t ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 14 Apr 2025 21:38:26 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0114</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_114_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_114_CSAF.json</guid>
			<description><![CDATA[
Date: April 15, 2025  



Revision
Date
Changes


1.0
April 15, 2025
Initial release



The CVE-ID tracking this issue:  CVE-2024-11186 CVSSv3.1 Base Score: 9.9 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Common Weakness Enumeration: CWE-284 Improper Access Control This vulnerability is being tracked by BUG 1029707
Description
On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on manag ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 14 Apr 2025 21:37:31 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0113</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_113_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_113_CSAF.json</guid>
			<description><![CDATA[
Date: April 8, 2025
 



Revision
Date
Changes


1.0
April 8, 2025
Initial release



 
The CVE-ID tracking this issue: CVE-2024-12378 CVSSv3.1 Base Score: 9.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Common Weakness Enumeration: CWE-319: Cleartext Transmission of Sensitive Information This vulnerability is being tracked by BUG 997526
Description
On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 07 Apr 2025 23:52:48 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0112</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_112_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_112_CSAF.json</guid>
			<description><![CDATA[
Date: March 11, 2025



Revision
Date
Changes


1.0
March 11, 2025
Initial release



The CVE-ID tracking this issue: CVE-2024-9448 CVSSv3.1 Base Score: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Common Weakness Enumeration: CWE-284 Improper Access Control This vulnerability is being tracked by BUG 992963
Description
On affected platforms running Arista EOS with Traffic Policies configured the vulnerability will cause received untagged packets not to hit Traffic Policy ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Sat, 08 Mar 2025 02:25:47 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0111</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_111_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_111_CSAF.json</guid>
			<description><![CDATA[
Date: February 25, 2025



Revision
Date
Changes


1.0
February 25, 2025
Initial release



The CVE-ID tracking this issue: CVE-2025-1259 CVSSv3.1 Base Score: 7.7 (CVSS:3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Common Weakness Enumeration: CWE-284: Improper Access Control This vulnerability is being tracked by BUG 1015822
The CVE-ID tracking this issue: CVE-2025-1260 CVSSv3.1 Base Score: 9.1 (CVSS:3.1 AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Common Weakness Enumeration: CWE-284: Imp ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 25 Feb 2025 20:12:59 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0110</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_110_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_110_CSAF.json</guid>
			<description><![CDATA[
Date: January 24, 2025



Revision
Date
Changes


1.0
January 21, 2025
Initial release


1.1
January 24, 2025
Updated Affected Software Versions list



The CVE-ID tracking this issue: CVE-2024-9135 CVSSv3.1 Base Score: 5.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Common Weakness Enumeration: CWE-401: Missing Release of Memory after Effective LifetimeThis vulnerability is being tracked by BUG 1006114
Description
On affected platforms running Arista EOS with BGP Link ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 20 Jan 2025 22:11:49 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0109</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_109_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_109_CSAF.json</guid>
			<description><![CDATA[
Date: February 6, 2025



Revision
Date
Changes


1.0
January 14, 2025
Initial release


1.1
February 6, 2025
Updated EOS-Based Product Versions



The CVE-ID tracking this issue: CVE-2024-8000 CVSSv3.1 Base Score: 5.3 (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Common Weakness Enumeration: CWE-284: Improper Access Control This vulnerability is being tracked by BUG 989881
Description
On affected platforms running Arista EOS with 802.1X configured, certain conditions ma ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 13 Jan 2025 16:27:07 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0108</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_108_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_108_CSAF.json</guid>
			<description><![CDATA[
Date: December 5, 2024



Revision
Date
Changes


1.0
November 26, 2024
Initial release


1.1
December 5, 2024
Update the affected and fixed EOS versions



The CVE-ID tracking this issue: CVE-2024-6437 CVSSv3.1 Base Score: 5.8 (CVSS:3.1/ AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L) Common Weakness Enumeration: CWE-1220: Insufficient Granularity of Access Control This vulnerability is being tracked by BUG 962149
Description
On affected platforms running Arista EOS with one of the ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 26 Nov 2024 01:58:11 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0107</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_107_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_107_CSAF.json</guid>
			<description><![CDATA[
Date: November 19, 2024  



Revision
Date
Changes


1.0
November 19, 2024
Initial release



The CVE-ID tracking this issue: CVE-2024-7095 CVSSv3.1 Base Score: 4.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Common Weakness Enumeration: CWE-401: Missing Release of Memory after Effective LifetimeThis vulnerability is being tracked by BUG974415
Description
On affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under s ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 19 Nov 2024 00:47:41 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0106</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_106_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_106_CSAF.json</guid>
			<description><![CDATA[
Date: November 19, 2024  



Revision
Date
Changes


1.0
November 19, 2024
Initial release



Description
The CVE-ID tracking this issue: CVE-2024-5872 CVSSv3.1 Base Score: 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Common Weakness Enumeration: CWE-346: Origin Validation ErrorThis vulnerability is being tracked by BUG 884202
Description
On affected platforms running Arista EOS, a specially crafted packet with incorrect VLAN tag might be copied to CPU, which may cause  ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 19 Nov 2024 00:45:53 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0104</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_104_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_104_CSAF.json</guid>
			<description><![CDATA[
Date: September 24, 2024  



Revision
Date
Changes


1.0
September 24, 2024
Initial release



The CVE-ID tracking this issue: CVE-2024-7142 CVSSv3.1 Base Score: 4.6 (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)Common Weakness Enumeration: CWE-311: Missing Encryption of Sensitive Data This vulnerability is being tracked by BUG 984230
Description
On Arista CloudVision Appliance (CVA) affected releases running on appliances that support hardware disk encryption (DCA-350E-CV on ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 24 Sep 2024 14:54:54 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0103</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_103.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_103.json</guid>
			<description><![CDATA[
Date: July 23, 2024



Revision
Date
Changes


1.0
July 23, 2024
Initial release



The CVE-ID tracking this issue: CVE-2024-6858CVSSv3.1 Base Score: 6.5 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)Common Weakness Enumeration: CWE-287 Improper Authentication.This vulnerability is being tracked by BUG 828435
Description
In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the  ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 16 Jul 2024 22:07:45 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0102</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_102.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_102.json</guid>
			<description><![CDATA[
Date: August 9, 2024



Revision
Date
Changes


1.0
July 23, 2024
Initial release


1.1
August 9, 2024
Clarification of affected systems



The CVE-ID tracking this issue: CVE-2024-27891CVSSv3.1 Base Score: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)Common Weakness Enumeration: CWE-284: Improper Access ControlThis vulnerability is being tracked by BUG 906098
Description
On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same inte ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 16 Jul 2024 00:09:12 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0098</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_98.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_98.json</guid>
			<description><![CDATA[
Date: June 25, 2024  



Revision
Date
Changes


1.0
June 25, 2024
Initial release



 
The CVE-ID tracking this issue: CVE-2024-4578 CVSSv3.1 Base Score: 8.4 (CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)Common Weakness Enumeration: CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
This vulnerability is being tracked by BUG948397
Description
This Advisory describes an issue that impacts Arista Wireless Access Points. Any entity with  ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 25 Jun 2024 18:09:44 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0096</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_96.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_96.json</guid>
			<description><![CDATA[
Date: May 21, 2024  



Revision
Date
Changes


1.0
May 21, 2024
Initial release



 
The CVE-ID tracking this issue: CVE-2023-5502 CVSSv3.1 Base Score: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Common Weakness Enumeration: CWE-287 Improper Access Control This vulnerability is being tracked by BUG 862986
Description
On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, and routing enabled on the access VLAN of the p ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Fri, 17 May 2024 18:48:32 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0093</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_93.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_93.json</guid>
			<description><![CDATA[
Date: February 28, 2024



Revision
Date
Changes


1.0
February 28, 2024
Initial release



The CVE-ID tracking this issue: CVE-2024-27889CVSSv3.1 Base Score: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)Common Weakness Enumeration: CWE-89: Improper Neutralization of Special Elements used in an SQL CommandThis vulnerability is being tracked by NGFW-14509
Description
Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Managem ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 26 Feb 2024 21:25:35 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0091</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_91.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_91.json</guid>
			<description><![CDATA[
Date: February 20, 2024
 



Revision
Date
Changes


1.0
February 20, 2024
Initial release



The CVE-ID tracking this issue: CVE-2023-6068 CVSSv3.1 Base Score: 3.1 (AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N) Common Weakness Enumeration: CWE-283 Improper Access ControlThis vulnerability is being tracked by BUG 869667
Description
On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of t ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Thu, 15 Feb 2024 20:58:24 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0090</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_90.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_90.json</guid>
			<description><![CDATA[
Date: December 5, 2023
 



Revision
Date
Changes


1.0
December 5, 2023
Initial release



The CVE-ID tracking this issue: CVE-2023-24547 CVSSv3.1 Base Score: 5.9 (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H) Common Weakness Enumeration: CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer This vulnerability is being tracked by BUG868319, BUG873034, MOS-2222, MOS-2255.
Description
On affected platforms running Arista MOS, the configuration of a BGP  ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Sat, 02 Dec 2023 22:27:57 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0089</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_89.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_89.json</guid>
			<description><![CDATA[
Date: August 23, 2023
 



Revision
Date
Changes


1.0
August 23, 2023
Initial release



 
The CVE-ID tracking this issue: CVE-2023-24548 CVSSv3.1 Base Score: 5.3 (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Common Weakness Enumeration: CWE-120 Buffer Copy without Checking Size of Input This vulnerability is being tracked by BUG 828687
Description
On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel an ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Thu, 17 Aug 2023 22:13:04 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0088</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_88.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_88.json</guid>
			<description><![CDATA[
Date: August 23, 2023
 
 



Revision
Date
Changes


1.0
August 23, 2023
Initial release



The CVE-ID tracking this issue: CVE-2023-3646 CVSSv3.1 Base Score: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Common Weakness Enumeration: CWE-125 Out-of-bounds Read This vulnerability is being tracked by BUG829136, which is triggered by BUG765111
Description
On affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error m ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Thu, 17 Aug 2023 22:02:44 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0087</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_87.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_87.json</guid>
			<description><![CDATA[
Date: May 31, 2023
 
 



Revision
Date
Changes


1.0
May 31, 2023
Initial release


1.1
September 24, 2024
Update fixed release info



The CVE-ID tracking this issue: CVE-2023-24510 CVSSv3.1 Base Score: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Common Weakness Enumeration: CWE-755 Improper Handling of Exceptional Conditions This vulnerability is being tracked by BUG753188
Description
On the affected platforms running EOS, a malformed DHCP packet might cause t ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Thu, 25 May 2023 19:20:55 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0086</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_86.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_86.json</guid>
			<description><![CDATA[
Date: April 25, 2023
 
 



Revision
Date
Changes


1.0
April 25, 2023
Initial release



The CVE-ID tracking this issue: CVE-2023-24512 CVSSv3.1 Base Score: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Common Weakness Enumeration: CWE-284 Improper Access Control This vulnerability is being tracked by BUG751697
Description
On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to upda ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 24 Apr 2023 19:05:33 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0085</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_85.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_85.json</guid>
			<description><![CDATA[
Date: April 11, 2023
 



Revision
Date
Changes


1.0
April 11, 2023
Initial release



This advisory consists of two CVEs which affect the Arista CloudEOS product.
CVE-ID: CVE-2023-24545 CVSSv3.1 Base Score: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Common Weakness Enumeration: CWE-400- Uncontrolled Resource Consumption This vulnerability is being tracked by BUG 743423
CVE-ID: CVE-2023-24513 CVSSv3.1 Base Score: 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Com ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 11 Apr 2023 21:43:08 +0000</pubDate>
		</item>
	</channel>
</rss>