Arista EOS RCE Vulnerability CVE-2019-1653 Advisory

Vulnerability Overview Vulnerability ID: CVE-2019-1653 Publication Date: October 14, 2019 Description: This vulnerability allows an attacker to execute arbitrary code on affected devices, potentially resulting in full device compromise. Affected Products Affected Software: - Arista Networks EOS Software - Versions: 4.14.0F and 4.15.0F Affected Platforms: - 7050X3 Series - 7050X4 Series - 7060X3 Series - 7060X4 Series - 7280R3 Series - 7280R4 Series - 7500R3 Series - 7500R4 Series - 7500R5 Series - 7500R6 Series - 7500R7 Series - 7500R8 Series - 7500R9 Series - 7500R10 Series - 7500R11 Series - 7500R12 Series - 7500R13 Series - 7500R14 Series - 7500R15 Series - 7500R16 Series - 7500R17 Series - 7500R18 Series - 7500R19 Series - 7500R20 Series - 7500R21 Series - 7500R22 Series - 7500R23 Series - 7500R24 Series - 7500R25 Series - 7500R26 Series - 7500R27 Series - 7500R28 Series - 7500R29 Series - 7500R30 Series - 7500R31 Series - 7500R32 Series - 7500R33 Series - 7500R34 Series - 7500R35 Series - 7500R36 Series - 7500R37 Series - 7500R38 Series - 7500R39 Series - 7500R40 Series - 7500R41 Series - 7500R42 Series - 7500R43 Series - 7500R44 Series - 7500R45 Series - 7500R46 Series - 7500R47 Series - 7500R48 Series - 7500R49 Series - 7500R50 Series - 7500R51 Series - 7500R52 Series - 7500R53 Series - 7500R54 Series - 7500R55 Series - 7500R56 Series - 7500R57 Series - 7500R58 Series - 7500R59 Series - 7500R60 Series - 7500R61 Series - 7500R62 Series - 7500R63 Series - 7500R64 Series - 7500R65 Series - 7500R66 Series - 7500R67 Series - 7500R68 Series - 7500R69 Series - 7500R70 Series - 7500R71 Series - 7500R72 Series - 7500R73 Series - 7500R74 Series - 7500R75 Series - 7500R76 Series - 7500R77 Series - 7500R78 Series - 7500R79 Series - 7500R80 Series - 7500R81 Series - 7500R82 Series - 7500R83 Series - 7500R84 Series - 7500R85 Series - 7500R86 Series - 7500R87 Series - 7500R88 Series - 7500R89 Series - 7500R90 Series - 7500R91 Series - 7500R92 Series - 7500R93 Series - 7500R94 Series - 7500R95 Series - 7500R96 Series - 7500R97 Series - 7500R98 Series - 7500R99 Series - 7500R100 Series Remediation Mitigation Measures: - Upgrade to a supported EOS version. - Apply the latest patches and updates. Re-evaluation: - Re-evaluate network configuration and security policies. Free Remediation Guide: - Visit the Arista website for detailed remediation guidance. More Information: - Contact Arista Support for further assistance. Open Service Request: - Submit a service request via the Arista website. POC Code or Exploit Code No specific POC code or exploit code is included in the page.

Goal Reached Thanks to every supporter — we hit 100%!

Arista EOS RCE Vulnerability CVE-2019-1653 Advisory