NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in Arista EOS
view advisory published 2025-11-20
Arista heeft kwetsbaarheden verholpen in de Arista EOS-platform.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-5090US | — | — | ||
CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instability in the CVX cluster. An attacker could use this behavior… | ||||
| CVE-2025-5089US | — | — | ||
In a CVX cluster, an EOS switch connected to a CVX server is not resilient to certain malformed messages received from the connected CVX server. Similarly, the CVX server is not re… | ||||
| CVE-2025-5088US | — | — | ||
An authenticated Redis session could be used to obtain full root access to all servers in the CVX cluster. Note that this would require an attacker to have both network access to t… | ||||
| CVE-2025-8873US | — | — | ||
On affected platforms running Arista EOS with IPsec configured, a specially crafted packet can cause the dataplane to stop processing all IPsec traffic. The control plane may detec… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan