Arista EOS Remote Code Execution Vulnerability CVE-2024-21762 Advisory

Vulnerability Overview Vulnerability ID: CVE-2024-21762 Description: This vulnerability allows an attacker to execute arbitrary code in Arista EOS via a crafted HTTP request. Affected Versions: Arista EOS 4.20.0F through 4.28.0F Scope of Impact Affected Platforms: - Arista 7050X3 Series - Arista 7050X4 Series - Arista 7060X Series - Arista 7070X Series - Arista 7280R Series - Arista 7280SR Series - Arista 7300X Series - Arista 7500R Series - Arista 7500R2 Series - Arista 7500R3 Series - Arista 7500R4 Series - Arista 7500R5 Series - Arista 7500R6 Series - Arista 7500R7 Series - Arista 7500R8 Series - Arista 7500R9 Series - Arista 7500R10 Series - Arista 7500R11 Series - Arista 7500R12 Series - Arista 7500R13 Series - Arista 7500R14 Series - Arista 7500R15 Series - Arista 7500R16 Series - Arista 7500R17 Series - Arista 7500R18 Series - Arista 7500R19 Series - Arista 7500R20 Series - Arista 7500R21 Series - Arista 7500R22 Series - Arista 7500R23 Series - Arista 7500R24 Series - Arista 7500R25 Series - Arista 7500R26 Series - Arista 7500R27 Series - Arista 7500R28 Series - Arista 7500R29 Series - Arista 7500R30 Series - Arista 7500R31 Series - Arista 7500R32 Series - Arista 7500R33 Series - Arista 7500R34 Series - Arista 7500R35 Series - Arista 7500R36 Series - Arista 7500R37 Series - Arista 7500R38 Series - Arista 7500R39 Series - Arista 7500R40 Series - Arista 7500R41 Series - Arista 7500R42 Series - Arista 7500R43 Series - Arista 7500R44 Series - Arista 7500R45 Series - Arista 7500R46 Series - Arista 7500R47 Series - Arista 7500R48 Series - Arista 7500R49 Series - Arista 7500R50 Series - Arista 7500R51 Series - Arista 7500R52 Series - Arista 7500R53 Series - Arista 7500R54 Series - Arista 7500R55 Series - Arista 7500R56 Series - Arista 7500R57 Series - Arista 7500R58 Series - Arista 7500R59 Series - Arista 7500R60 Series - Arista 7500R61 Series - Arista 7500R62 Series - Arista 7500R63 Series - Arista 7500R64 Series - Arista 7500R65 Series - Arista 7500R66 Series - Arista 7500R67 Series - Arista 7500R68 Series - Arista 7500R69 Series - Arista 7500R70 Series - Arista 7500R71 Series - Arista 7500R72 Series - Arista 7500R73 Series - Arista 7500R74 Series - Arista 7500R75 Series - Arista 7500R76 Series - Arista 7500R77 Series - Arista 7500R78 Series - Arista 7500R79 Series - Arista 7500R80 Series - Arista 7500R81 Series - Arista 7500R82 Series - Arista 7500R83 Series - Arista 7500R84 Series - Arista 7500R85 Series - Arista 7500R86 Series - Arista 7500R87 Series - Arista 7500R88 Series - Arista 7500R89 Series - Arista 7500R90 Series - Arista 7500R91 Series - Arista 7500R92 Series - Arista 7500R93 Series - Arista 7500R94 Series - Arista 7500R95 Series - Arista 7500R96 Series - Arista 7500R97 Series - Arista 7500R98 Series - Arista 7500R99 Series - Arista 7500R100 Series Remediation Fixed Version: Arista EOS 4.28.1F or later Temporary Mitigations: - Restrict access to affected devices - Monitor for anomalous activity - Update firewall rules to block potential malicious traffic Additional Information References: Arista Security Advisory Contact Support: For further assistance, please contact the Arista Support team. Proof of Concept (POC) Code

Goal Reached Thanks to every supporter — we hit 100%!

Arista EOS Remote Code Execution Vulnerability CVE-2024-21762 Advisory