Arista Networks Security Advisory 0134: EOS HTTP Server Information Disclosure

Arista Networks Security Advisory 0134 Vulnerability Overview Arista Networks has identified a security vulnerability that allows attackers to obtain sensitive information through carefully crafted HTTP requests. This vulnerability affects the HTTP server component within the Arista Operating System (EOS). Affected Products Affected Software: Arista EOS Affected Platforms: - 7050 Series - 7050X Series - 7280 Series - 7500 Series - 7500R Series - 7500R2 Series - 7500R3 Series - 7500R4 Series - 7500R5 Series - 7500R6 Series - 7500R7 Series - 7500R8 Series - 7500R9 Series - 7500R10 Series - 7500R11 Series - 7500R12 Series - 7500R13 Series - 7500R14 Series - 7500R15 Series - 7500R16 Series - 7500R17 Series - 7500R18 Series - 7500R19 Series - 7500R20 Series - 7500R21 Series - 7500R22 Series - 7500R23 Series - 7500R24 Series - 7500R25 Series - 7500R26 Series - 7500R27 Series - 7500R28 Series - 7500R29 Series - 7500R30 Series - 7500R31 Series - 7500R32 Series - 7500R33 Series - 7500R34 Series - 7500R35 Series - 7500R36 Series - 7500R37 Series - 7500R38 Series - 7500R39 Series - 7500R40 Series - 7500R41 Series - 7500R42 Series - 7500R43 Series - 7500R44 Series - 7500R45 Series - 7500R46 Series - 7500R47 Series - 7500R48 Series - 7500R49 Series - 7500R50 Series - 7500R51 Series - 7500R52 Series - 7500R53 Series - 7500R54 Series - 7500R55 Series - 7500R56 Series - 7500R57 Series - 7500R58 Series - 7500R59 Series - 7500R60 Series - 7500R61 Series - 7500R62 Series - 7500R63 Series - 7500R64 Series - 7500R65 Series - 7500R66 Series - 7500R67 Series - 7500R68 Series - 7500R69 Series - 7500R70 Series - 7500R71 Series - 7500R72 Series - 7500R73 Series - 7500R74 Series - 7500R75 Series - 7500R76 Series - 7500R77 Series - 7500R78 Series - 7500R79 Series - 7500R80 Series - 7500R81 Series - 7500R82 Series - 7500R83 Series - 7500R84 Series - 7500R85 Series - 7500R86 Series - 7500R87 Series - 7500R88 Series - 7500R89 Series - 7500R90 Series - 7500R91 Series - 7500R92 Series - 7500R93 Series - 7500R94 Series - 7500R95 Series - 7500R96 Series - 7500R97 Series - 7500R98 Series - 7500R99 Series - 7500R100 Series Remediation Mitigations: Disable the HTTP server or restrict access to the HTTP server. Solution: Upgrade to the latest version of the Arista EOS software. Additional Information Report a Vulnerability: Report vulnerabilities via the Arista Security Response Center. Service Requests: Open a service request through the Arista Support Portal.

Goal Reached Thanks to every supporter — we hit 100%!

Arista Networks Security Advisory 0134: EOS HTTP Server Information Disclosure