CVEvulnerability

CVE-2015-8236

10.0 HIGH Published 2015-11-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-11-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-264

Description

Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and 4.15 before 4.15.0FX1.1 allows remote attackers to execute arbitrary code as root by leveraging management-plane access, aka Bug 138716.

Affected configurations

• arista eos (<= 4.11.11) • arista eos 4.12.5.2 • arista eos 4.12.6.1 • arista eos 4.12.7.1 • arista eos 4.12.8 • arista eos 4.12.8.1 • arista eos 4.12.9 • arista eos 4.12.10 • arista eos 4.13.1.1f • arista eos 4.13.2.1f • arista eos 4.13.3.1f • arista eos 4.13.4.1f • arista eos 4.13.5 • arista eos 4.13.5.1f • arista eos 4.13.6 • arista eos 4.13.7.2m • arista eos 4.13.7.3m • arista eos 4.13.7m • arista eos 4.13.8m • arista eos 4.13.9.1m • arista eos 4.13.9m • arista eos 4.13.10m • arista eos 4.13.11m • arista eos 4.13.12m • arista eos 4.13.13m • arista eos 4.14.0f • arista eos 4.14.1f • arista eos 4.14.2f • arista eos 4.14.3.1f • arista eos 4.14.3f • arista eos 4.14.4.1f • arista eos 4.14.4.2f • arista eos 4.14.4f • arista eos 4.14.5.1f-ssu • arista eos 4.14.5f • arista eos 4.14.5fx • arista eos 4.14.5fx.1 • arista eos 4.14.5fx.2 • arista eos 4.14.5fx.3 • arista eos 4.14.5fx.4 • arista eos 4.14.6f • arista eos 4.14.7.1f • arista eos 4.14.7f • arista eos 4.14.8.1f • arista eos 4.14.8f • arista eos 4.14.9 • arista eos 4.15.0f • arista eos 4.15.0fx • arista eos 4.15.0fx1 • arista eos 4.15.0fxa • arista eos 4.15.1f • arista eos 4.15.1fx-7060qx • arista eos 4.15.1fx-7060x • arista eos 4.15.1fxb • arista eos 4.15.2f

Related

Weakness · not in database (1)

References