Arista EOS

productDE

cpe:/o:arista:arista_eos:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical14high12medium3low

updated 2026-10-27

vulnerabilities (38)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-7473US	—OT critical	1.11% (66th)	KEV	no fix	2026-06-05	—
CVE-2024-6387US	high8.1	99.5% (100th)	Exploit	no fix	2024-07-01	—
CVE-2023-45288US	—	92.0% (100th)	Exploit	no fix	2024-04-04	—
CVE-2024-27316US	high7.5	91.3% (100th)	Exploit	no fix	2024-04-04	—
CVE-2015-7547US	high8.1	91.0% (100th)	Exploit	no fix	2016-02-18	—
CVE-2024-30255US	high7.5	87.8% (100th)	Exploit	no fix	2024-04-04	—
CVE-2016-0800US	medium5.9	82.1% (100th)	Exploit	no fix	2016-03-01	—
CVE-2018-5391US	high7.5	32.4% (98th)	Exploit	no fix	2018-09-06	—
CVE-2020-25686US	low3.7OT elevated	5.47% (93rd)	Exploit	no fix	2021-01-20	—
CVE-2024-31309US	—	94.6% (100th)	—	no fix	2024-04-10	—
CVE-2020-25687US	medium5.9	89.3% (100th)	—	no fix	2021-01-20	—
CVE-2020-25683US	medium5.9	88.7% (100th)	—	no fix	2021-01-20	—
CVE-2019-9515US	high7.5	87.3% (100th)	—	no fix	2019-08-13	—
CVE-2024-27919US	—	86.7% (100th)	—	no fix	2024-04-04	—
CVE-2024-28182US	—	85.0% (100th)	—	no fix	2024-04-04	—
CVE-2020-25681US	high8.1	84.1% (100th)	—	no fix	2021-01-20	—
CVE-2019-9512US	high7.5	83.4% (100th)	—	no fix	2019-08-13	—
CVE-2024-2653US	—	83.4% (100th)	—	no fix	2024-04-03	—
CVE-2019-9514US	high7.5	82.8% (100th)	—	no fix	2019-08-13	—
CVE-2020-25682US	high8.1	75.1% (100th)	—	no fix	2021-01-20	—
CVE-2024-2758US	—	72.8% (99th)	—	no fix	2024-04-03	—
CVE-2016-0703US	medium5.9	5.40% (93rd)	—	no fix	2016-03-02	—
CVE-2019-10079US	high7.5	4.56% (92nd)	—	no fix	2019-10-22	—
CVE-2020-25684US	low3.7	4.16% (91st)	—	no fix	2021-01-20	—
CVE-2015-5229US	high7.5	2.24% (83rd)	—	no fix	2016-04-08	—
CVE-2020-25685US	low3.7	2.23% (83rd)	—	no fix	2021-01-20	—
CVE-2021-27853US	medium4.7	0.81% (57th)	—	no fix	2022-09-27	—
CVE-2021-27854US	medium4.7	0.71% (53rd)	—	no fix	2022-09-27	—
CVE-2021-27862US	medium4.7	0.69% (52nd)	—	no fix	2022-09-27	—
CVE-2021-27861US	medium4.7	0.66% (51st)	—	no fix	2022-09-27	—
CVE-2026-60000US	high7.5	0.62% (49th)	—	no fix	2026-07-08	—
CVE-2026-60002US	critical9.4	0.30% (22nd)	—	no fix	2026-07-08	—
CVE-2026-60001US	—	0.29% (21st)	—	no fix	2026-07-08	—
CVE-2026-59996US	medium5.4	0.25% (16th)	—	no fix	2026-07-08	—
CVE-2026-59995US	medium5.4	0.25% (16th)	—	no fix	2026-07-08	—
CVE-2026-59998US	medium6.5	0.18% (7th)	—	no fix	2026-07-08	—
CVE-2026-59997US	medium5.4	0.18% (7th)	—	no fix	2026-07-08	—
CVE-2026-59999US	high7.5	0.16% (5th)	—	no fix	2026-07-08	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption11 CVEs
CWE-770Allocation of Resources Without Limits or Throttling9 CVEs
CWE-290Authentication Bypass by Spoofing7 CVEs
CWE-122Heap-based Buffer Overflow4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-358Improperly Implemented Security Check for Standard3 CVEs
CWE-130Improper Handling of Length Parameter Inconsistency2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)38 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan