Vulnerability Monitor

The vendors, products, and vulnerabilities you care about
eos Vendor: arista

About This Product

eos is a software product offered by arista. As an operating system, this product forms the foundation of countless systems, making vulnerability monitoring essential for organizations relying on it. Security vulnerabilities in products of this category can affect system availability, data confidentiality, and integrity across entire networks. The significant number of reported vulnerabilities indicates this product has received substantial security scrutiny and community focus over time. Regular assessment of known vulnerabilities and timely patching are fundamental components of responsible system administration for any deployment of this software.

Vulnerability Landscape Summary

SecUtils has identified 87 known vulnerabilities affecting arista eos. This includes 13 critical-severity issues and 25 high-severity issues that warrant immediate attention. Vulnerabilities in this product have been disclosed spanning from 2014 to 2026, indicating a sustained research interest and ongoing security attention. 40 medium-severity issues and 9 low-severity issues complete the vulnerability landscape. Organizations should prioritize patching based on deployment context, asset criticality, and exploitation likelihood rather than severity alone.

Known Vulnerabilities
ID Date Published Last Modified Severity (CVSSv3) Severity (CVSSv2) Exploit Available
CVE-2014-6271 2014-09-24 2026-06-17 9.8 10.0 Likely
CVE-2014-7169 2014-09-25 2026-06-17 9.8 10.0 Likely
CVE-2015-3209 2015-06-15 2026-06-17 - 7.5 Likely
CVE-2015-5165 2015-08-12 2026-06-17 - 9.3 Likely
CVE-2015-3214 2015-08-31 2026-06-17 - 6.9 Unknown
CVE-2015-6855 2015-11-06 2026-06-17 7.5 5.0 Likely
CVE-2015-8236 2015-11-19 2026-06-17 - 10.0 Likely
CVE-2017-14491 2017-10-04 2026-06-17 9.8 7.5 Likely
CVE-2017-18017 2018-01-03 2026-06-17 9.8 10.0 Likely
CVE-2018-5255 2018-03-05 2026-06-17 6.5 4.0 Likely
CVE-2018-5254 2018-04-12 2026-06-17 7.5 5.0 Likely
CVE-2018-14008 2019-08-15 2026-06-17 6.5 3.3 Unknown
CVE-2019-17596 2019-10-24 2026-06-17 7.5 5.0 Likely
CVE-2015-5239 2020-01-23 2026-06-17 6.5 4.0 Likely
CVE-2015-5278 2020-01-23 2026-06-17 6.5 4.0 Likely
CVE-2015-5745 2020-01-23 2026-06-17 6.5 4.0 Likely
CVE-2015-6815 2020-01-31 2026-06-17 3.5 2.7 Unknown
CVE-2020-10188 2020-03-06 2026-06-17 9.8 10.0 Likely
CVE-2019-18948 2020-04-16 2026-06-17 7.5 5.0 Likely
CVE-2020-17355 2020-10-21 2026-06-17 7.5 4.3 Likely
CVE-2020-15897 2020-10-26 2026-06-17 7.5 5.0 Likely
CVE-2020-26569 2020-12-28 2026-06-17 5.9 4.3 Likely
CVE-2020-15898 2020-12-28 2026-06-17 5.3 5.0 Likely
CVE-2020-24360 2020-12-28 2026-06-17 7.4 6.1 Unknown
CVE-2020-25684 2021-01-20 2026-06-17 3.7 4.3 Likely
CVE-2020-25685 2021-01-20 2026-06-17 3.7 4.3 Likely
CVE-2020-25686 2021-01-20 2026-06-17 3.7 4.3 Likely
CVE-2021-28496 2021-10-21 2026-06-17 5.7 4.0 Likely
CVE-2021-28500 2022-01-14 2026-06-17 9.1 6.9 Unknown
CVE-2021-28506 2022-01-14 2026-06-17 9.1 9.4 Likely
CVE-2021-28507 2022-01-14 2026-06-17 5.5 4.9 Unknown
CVE-2021-28503 2022-02-04 2026-06-17 7.4 6.8 Likely
CVE-2021-28504 2022-04-01 2026-06-17 7.5 4.3 Likely
CVE-2021-28505 2022-04-14 2026-06-17 7.5 5.0 Likely
CVE-2021-28508 2022-05-26 2026-06-17 6.8 3.6 Unknown
CVE-2021-28509 2022-05-26 2026-06-17 6.1 3.6 Unknown
CVE-2021-28511 2022-08-05 2026-06-17 5.8 - -
CVE-2021-28510 2023-01-26 2026-06-17 5.3 - -
CVE-2023-24511 2023-04-12 2026-06-17 5.3 - -
CVE-2023-24509 2023-04-13 2026-06-17 9.3 - -
CVE-2023-24512 2023-04-25 2026-06-17 8.8 - -
CVE-2023-24510 2023-06-05 2026-06-17 7.5 - -
CVE-2023-24548 2023-08-29 2026-06-17 5.3 - -
CVE-2023-3646 2023-08-29 2026-06-17 5.9 - -
CVE-2024-6387 2024-07-01 2026-09-01 8.1 - -
CVE-2024-6858 2026-06-04 2026-07-22 6.5 - -
CVE-2023-5502 2026-06-04 2026-07-22 5.9 - -
CVE-2024-27890 2026-06-04 2026-07-22 9.6 - -
CVE-2024-27891 2026-06-04 2026-07-22 5.3 - -
CVE-2024-27892 2026-06-04 2026-07-22 9.6 - -
CVE-2025-8873 2026-06-04 2026-07-22 7.5 - -
CVE-2025-5089 2026-06-05 2026-06-17 6.5 - -
CVE-2026-7473 2026-06-05 2026-06-17 5.8 - -
CVE-2026-2379 2026-06-05 2026-06-17 5.9 - -
CVE-2026-73449 2026-09-14 2026-09-16 5.9 - -
CVE-2026-75943 2026-09-14 2026-09-16 2.6 - -
CVE-2026-75944 2026-09-14 2026-09-16 2.6 - -
CVE-2026-75945 2026-09-14 2026-09-16 2.6 - -
CVE-2026-77191 2026-09-14 2026-09-16 2.6 - -
CVE-2026-19641 2026-09-15 2026-09-16 5.3 - -
CVE-2026-73451 2026-09-15 2026-09-16 4.8 - -
CVE-2026-73466 2026-09-15 2026-09-17 6.3 - -
CVE-2026-73458 2026-09-15 2026-09-16 8.2 - -
CVE-2026-19655 2026-09-15 2026-09-16 6.5 - -
CVE-2026-73444 2026-09-15 2026-09-16 4.7 - -
CVE-2026-73446 2026-09-16 2026-09-16 7.4 - -
CVE-2026-73459 2026-09-16 2026-09-16 7.4 - -
CVE-2026-73460 2026-09-16 2026-09-16 6.1 - -
CVE-2026-73447 2026-09-16 2026-09-17 9.1 - -
CVE-2026-2380 2026-09-16 2026-09-16 7.4 - -
CVE-2026-73439 2026-09-16 2026-09-17 7.5 - -
CVE-2026-73445 2026-09-16 2026-09-16 4.9 - -
CVE-2026-73454 2026-09-16 2026-09-17 8.1 - -
CVE-2026-73461 2026-09-16 2026-09-17 8.0 - -
CVE-2026-73463 2026-09-16 2026-09-16 5.3 - -
CVE-2026-73464 2026-09-16 2026-09-17 8.8 - -
CVE-2026-19640 2026-09-16 2026-09-16 4.2 - -
CVE-2026-73436 2026-09-16 2026-09-16 6.5 - -
CVE-2026-73438 2026-09-16 2026-09-16 5.3 - -
CVE-2026-73440 2026-09-16 2026-09-16 4.2 - -
CVE-2026-73453 2026-09-16 2026-09-17 10.0 - -
CVE-2026-73469 2026-09-16 2026-09-16 5.8 - -
CVE-2026-77190 2026-09-16 2026-09-16 6.5 - -
CVE-2026-73442 2026-09-16 2026-09-17 3.0 - -
CVE-2026-73443 2026-09-16 2026-09-17 4.7 - -
CVE-2026-73456 2026-09-16 2026-09-17 10.0 - -
CVE-2026-73457 2026-09-16 2026-09-17 5.3 - -

How SecUtils Interprets Product Data

SecUtils normalizes and enriches National Vulnerability Database (NVD) records for arista eos by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and structuring the data for rapid analysis and asset correlation. For every vulnerability listed, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference information to enable organizations to prioritize patching and risk assessment efficiently. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for vulnerability management and security operations.