Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority LOW 11

On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user with sufficient privileges to view agent t…

CVSS 4.0LOW 2.1 Adjacent network Low privileges No interaction EPSS 0.00209 Published 2026-09-16 No fix listed CWE-532
Priority LOW 24

On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is running can capture a legitimate authenticated VR…

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00273 Published 2026-09-16 No fix listed CWE-294
Priority LOW 24

On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypas…

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00299 Published 2026-09-15 No fix listed CWE-303