AArista

Products

Exploited and recent CVEs

• CVE-2025-2767 High 8.8 Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability 0.7%
• CVE-2024-12831 Medium 6.6 Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability 0.2%
• CVE-2024-12832 High 8.3 Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability 0.5%
• CVE-2024-12830 High 8.1 Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability 1.0%
• CVE-2024-12829 High 7.2 Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability 1.3%
• CVE-2021-28494 Critical 9.6 In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, authentication is bypassed by unprivileged users who are accessing the Web U 0.9%
• CVE-2021-28493 High 8.4 In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, a user may be able to execute commands despite not having the privileges to 0.2%
• CVE-2021-28495 High 7.2 In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, user authentication can be bypassed when API access is enabled via the JSON- 0.9%
• CVE-2021-28497 Medium 4.4 In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, the bash shell might be accessible to unprivileged users in situations where 0.2%
• CVE-2021-28499 Medium 6.3 In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user account passwords set in clear text could leak to users without any password. This issue affects: 0.2%
• CVE-2021-28498 High 8.7 In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user enable passwords set in clear text could result in unprivileged users getting complete access to 0.2%