Arista Networks EOS vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Arista Networks EOS: 53 record(s), with affected versions and fixes.
CVE-2025-8872
Medium · 6.5
CWE-400 Dec 16, 2025
A specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted
On affected platforms running Arista EOS with OSPFv3 configured, a specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted. This may cause disruption in the OSFPv3 routes on the switch.
This issue was discovered internally by Arista and is not aware of any malicious uses of this issue in customer networks.
CVE-2025-8870
Medium · 4.9
CWE-248 Nov 14, 2025
On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.
On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.153
CVE-2025-3456
Low · 3.8
CWE-532 Aug 25, 2025
On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and protocol specific encrypted secrets from the device running-
On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and protocol specific encrypted secrets from the device running-config could then be used to obtain protocol specific passwords in cases where symmetric passwords are required between devices with neighbor protocol relationships.