← Back

CVE-2015-8236

nvd nist
Published: Nov 19, 2015Modified: May 6, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and 4.15 before 4.15.0FX1.1 allows remote attackers to execute arbitrary code as root by leveraging management-plane access, aka Bug 138716.

Affected (55)

Products: Arista: Eos
Arista
1 product
Eos
Configuration A
55 vulnerable
Vulnerable SoftwareAffected Versions
Arista
Eos
Up to 4.11.11
Eos
Version 4.12.10
Eos
Version 4.12.5.2
Eos
Version 4.12.6.1
Eos
Version 4.12.7.1
Eos
Version 4.12.8.1
Eos
Version 4.12.8
Eos
Version 4.12.9
Eos
Version 4.13.1.1f
Eos
Version 4.13.10m
Eos
Version 4.13.11m
Eos
Version 4.13.12m
Eos
Version 4.13.13m
Eos
Version 4.13.2.1f
Eos
Version 4.13.3.1f
Eos
Version 4.13.4.1f
Eos
Version 4.13.5.1f
Eos
Version 4.13.5
Eos
Version 4.13.6
Eos
Version 4.13.7.2m
Eos
Version 4.13.7.3m
Eos
Version 4.13.7m
Eos
Version 4.13.8m
Eos
Version 4.13.9.1m
Eos
Version 4.13.9m
Eos
Version 4.14.0f
Eos
Version 4.14.1f
Eos
Version 4.14.2f
Eos
Version 4.14.3.1f
Eos
Version 4.14.3f
Eos
Version 4.14.4.1f
Eos
Version 4.14.4.2f
Eos
Version 4.14.4f
Eos
Version 4.14.5.1f-ssu
Eos
Version 4.14.5f
Eos
Version 4.14.5fx.1
Eos
Version 4.14.5fx.2
Eos
Version 4.14.5fx.3
Eos
Version 4.14.5fx.4
Eos
Version 4.14.5fx
Eos
Version 4.14.6f
Eos
Version 4.14.7.1f
Eos
Version 4.14.7f
Eos
Version 4.14.8.1f
Eos
Version 4.14.8f
Eos
Version 4.14.9
Eos
Version 4.15.0f
Eos
Version 4.15.0fx1
Eos
Version 4.15.0fx
Eos
Version 4.15.0fxa
Eos
Version 4.15.1f
Eos
Version 4.15.1fx-7060qx
Eos
Version 4.15.1fx-7060x
Eos
Version 4.15.1fxb
Eos
Version 4.15.2f

Related CWEs

CWE-264
CWE-264

References (2)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.