CVE-2015-8236 Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and 4.15 before 4.15.0FX1.1 allows remote attackers to execute arbitrary code as root by leveraging manage...
HighCVSS 10.0
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and 4.15 before 4.15.0FX1.1 allows remote attackers to execute arbitrary code as root by leveraging management-plane access, aka Bug 138716.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| arista eos | <= 4.11.11 | No fix listed |
| arista eos | = 4.12.5.2 | No fix listed |
| arista eos | = 4.12.6.1 | No fix listed |
| arista eos | = 4.12.7.1 | No fix listed |
| arista eos | = 4.12.8 | No fix listed |
| arista eos | = 4.12.8.1 | No fix listed |
| arista eos | = 4.12.9 | No fix listed |
| arista eos | = 4.12.10 | No fix listed |
| arista eos | = 4.13.1.1f | No fix listed |
| arista eos | = 4.13.2.1f | No fix listed |
| arista eos | = 4.13.3.1f | No fix listed |
| arista eos | = 4.13.4.1f | No fix listed |
| arista eos | = 4.13.5 | No fix listed |
| arista eos | = 4.13.5.1f | No fix listed |
| arista eos | = 4.13.6 | No fix listed |
| arista eos | = 4.13.7.2m | No fix listed |
| arista eos | = 4.13.7.3m | No fix listed |
| arista eos | = 4.13.7m | No fix listed |
| arista eos | = 4.13.8m | No fix listed |
| arista eos | = 4.13.9.1m | No fix listed |
| arista eos | = 4.13.9m | No fix listed |
| arista eos | = 4.13.10m | No fix listed |
| arista eos | = 4.13.11m | No fix listed |
| arista eos | = 4.13.12m | No fix listed |
| arista eos | = 4.13.13m | No fix listed |
Show 30 more
| Product | Affected versions | Fixed in |
|---|---|---|
| arista eos | = 4.14.0f | No fix listed |
| arista eos | = 4.14.1f | No fix listed |
| arista eos | = 4.14.2f | No fix listed |
| arista eos | = 4.14.3.1f | No fix listed |
| arista eos | = 4.14.3f | No fix listed |
| arista eos | = 4.14.4.1f | No fix listed |
| arista eos | = 4.14.4.2f | No fix listed |
| arista eos | = 4.14.4f | No fix listed |
| arista eos | = 4.14.5.1f-ssu | No fix listed |
| arista eos | = 4.14.5f | No fix listed |
| arista eos | = 4.14.5fx | No fix listed |
| arista eos | = 4.14.5fx.1 | No fix listed |
| arista eos | = 4.14.5fx.2 | No fix listed |
| arista eos | = 4.14.5fx.3 | No fix listed |
| arista eos | = 4.14.5fx.4 | No fix listed |
| arista eos | = 4.14.6f | No fix listed |
| arista eos | = 4.14.7.1f | No fix listed |
| arista eos | = 4.14.7f | No fix listed |
| arista eos | = 4.14.8.1f | No fix listed |
| arista eos | = 4.14.8f | No fix listed |
| arista eos | = 4.14.9 | No fix listed |
| arista eos | = 4.15.0f | No fix listed |
| arista eos | = 4.15.0fx | No fix listed |
| arista eos | = 4.15.0fx1 | No fix listed |
| arista eos | = 4.15.0fxa | No fix listed |
| arista eos | = 4.15.1f | No fix listed |
| arista eos | = 4.15.1fx-7060qx | No fix listed |
| arista eos | = 4.15.1fx-7060x | No fix listed |
| arista eos | = 4.15.1fxb | No fix listed |
| arista eos | = 4.15.2f | No fix listed |
References
- www.arista.com vendor-advisory