CVEvulnerability
CVE-2015-8236
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-11-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and 4.15 before 4.15.0FX1.1 allows remote attackers to execute arbitrary code as root by leveraging management-plane access, aka Bug 138716.
Affected configurations
• arista eos (<= 4.11.11)
• arista eos 4.12.5.2
• arista eos 4.12.6.1
• arista eos 4.12.7.1
• arista eos 4.12.8
• arista eos 4.12.8.1
• arista eos 4.12.9
• arista eos 4.12.10
• arista eos 4.13.1.1f
• arista eos 4.13.2.1f
• arista eos 4.13.3.1f
• arista eos 4.13.4.1f
• arista eos 4.13.5
• arista eos 4.13.5.1f
• arista eos 4.13.6
• arista eos 4.13.7.2m
• arista eos 4.13.7.3m
• arista eos 4.13.7m
• arista eos 4.13.8m
• arista eos 4.13.9.1m
• arista eos 4.13.9m
• arista eos 4.13.10m
• arista eos 4.13.11m
• arista eos 4.13.12m
• arista eos 4.13.13m
• arista eos 4.14.0f
• arista eos 4.14.1f
• arista eos 4.14.2f
• arista eos 4.14.3.1f
• arista eos 4.14.3f
• arista eos 4.14.4.1f
• arista eos 4.14.4.2f
• arista eos 4.14.4f
• arista eos 4.14.5.1f-ssu
• arista eos 4.14.5f
• arista eos 4.14.5fx
• arista eos 4.14.5fx.1
• arista eos 4.14.5fx.2
• arista eos 4.14.5fx.3
• arista eos 4.14.5fx.4
• arista eos 4.14.6f
• arista eos 4.14.7.1f
• arista eos 4.14.7f
• arista eos 4.14.8.1f
• arista eos 4.14.8f
• arista eos 4.14.9
• arista eos 4.15.0f
• arista eos 4.15.0fx
• arista eos 4.15.0fx1
• arista eos 4.15.0fxa
• arista eos 4.15.1f
• arista eos 4.15.1fx-7060qx
• arista eos 4.15.1fx-7060x
• arista eos 4.15.1fxb
• arista eos 4.15.2f