DeutschShown in its original language — a full translation is planned for a future version.
Arista EOS: Mehrere Schwachstellen
view advisory published 2026-09-09
Ein Angreifer kann mehrere Schwachstellen in Arista EOS ausnutzen, um erweiterte Berechtigungen, sogar Administratorrechte, zu erlangen, beliebigen Code, einschließlich Root-Code, auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen sowie Denial-of-Service-Zustände herbeizuführen.
01
describes (23)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-73462US | — | — | ||
On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated at… | ||||
| CVE-2026-73457US | — | — | ||
Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, the gNPSI client credentials might be logged in cl… | ||||
| CVE-2026-73456US | — | — | ||
Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, an unauthenticated gNPSI client can craft a malici… | ||||
| CVE-2026-73443US | —OT elevated | — | ||
On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is running c… | ||||
| CVE-2026-73442US | — | — | ||
On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user wi… | ||||
| CVE-2026-86107US | — | — | ||
The VeloCloud Edge and Gateway exhibit an out-of-bounds write vulnerability when processing tunneled IP fragments between authenticated overlay neighbors. This vulnerability impact… | ||||
| CVE-2026-86106US | —OT elevated | — | ||
An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. This could result in elevated command exec… | ||||
| CVE-2026-77190US | — | — | ||
On affected platforms running Arista EOS, an unauthenticated attacker who is network-adjacent to the switch and able to connect to a device with PIM Sparse Mode and MLAG configured… | ||||
| CVE-2026-73469US | —OT elevated | — | ||
When specific platforms are using Arista EOS with a loose Unicast Reverse Path Forwarding (uRPF) configuration, certain traffic may not be subjected to the intended verification dr… | ||||
| CVE-2026-73468US | — | — | ||
A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces, potentially resulting in temporary multicast traffic loss during the… | ||||
| CVE-2026-73455US | — | — | ||
On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, a specially crafted packet can cause the OSPFv3 agent to restart unexpectedly. | ||||
| CVE-2026-73453US | — | — | ||
An unauthenticated P4Runtime (Programming Protocol-Independent Packet Processors Runtime) client can achieve arbitrary code execution under certain conditions on affected platforms… | ||||
| CVE-2026-73440US | — | — | ||
On affected platforms running Arista EOS with Simple Network Management Protocol (SNMP) configured, SNMPv3 local or remote user credentials may be exposed as a one-way hashed, loca… | ||||
| CVE-2026-73461US | — | — | ||
On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC requests of an authenticated user to OpenConfig may use the wrong privilege level, resultin… | ||||
| CVE-2026-73439US | — | — | ||
On affected platforms running Arista EOS, if OpenConfig is configured and running a gNMI server on the system, and if gNSI Pathz is configured and a gNSI Pathz policy is present on… | ||||
| CVE-2026-73447US | — | — | ||
A privileged attacker can exploit certain operation to execute arbitrary commands with root privileges, leading to full device compromise. An authenticated user can exploit gRPC Ne… | ||||
| CVE-2026-73450US | —OT elevated | — | ||
On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the Dual Primary Detection network segment can send… | ||||
| CVE-2026-73460US | —OT elevated | — | ||
On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated attacker who can inject a malformed IS-IS LSP PDU packet can cause the IS-IS gracef… | ||||
| CVE-2026-73459US | — | — | ||
On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unex… | ||||
| CVE-2026-73446US | — | — | ||
On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can send a crafted IS-IS Hello Protocol Data Unit (PDU) that ca… | ||||
showing 20 of 23
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2026-3287 - CSAF Versionself
- WID-SEC-2026-3287 - Portal Versionself
- Arista Security Advisory vom 2026-09-09external
- Arista Security Advisory vom 2026-09-09external
- Arista Security Advisory vom 2026-09-09external
- Arista Security Advisory vom 2026-09-09external
- Arista Security Advisory vom 2026-09-09external
- Arista Security Advisory vom 2026-09-09external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan