Arista Alert
2625Warning Date
Severity Level
Warning Number
Target Sector
27 April, 2022
● High
2022-4729
All
Arista has released security updates to address a vulnerability in the following products:
- Arista EOS-based products
- 4.27.3 and below releases in the 4.27.x train
- 4.26.5 and below releases in the 4.26.x train
- 4.25.8 and below releases in the 4.25.x train
- 4.24.9 and below release in the 4.24.x train
- 4.23.11 and below release in the 4.23.x train
- 4.22.x train
- Arista 7130 Systems running MOS
- MOS-0.10.0 to MOS-0.36.2
- EOS Versions
- 4.27.1 and below releases in the 4.27.x train
- 4.26.4 and below releases in the 4.26.x train
- 4.25.6 and below releases in the 4.25.x train
- 4.24.8 and below releases in the 4.24.x train
- 4.23.10 and below releases in the 4.23.x train
- 4.22.x train
- Arista EOS-based products:
- 7020R Series
- 7050X/X2/X3 series
- 7060X/X2/X4 series
- 7150 series
- 7170 series
- 720XP series
- 7250X series
- 7260X/X3 series
- 7280E/R/R2 series
- 7300X/X3 series
- 7320X series
- 7368 / X4 series
- 7500E/R/R2 series
- 7500R3 Series
- 7800R3 Series
- 7280R3 Series
An attacker could exploit multiple vulnerabilities by doing the following:
- Execute arbitrary code
- Denial of service attack (DoS)
The CERT team encourages users to review Arista security advisory and apply the necessary updates: