Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2023-24547

On Arista MOS configuration of a BGP password will cause the password to be logged in clear text.

On affected platforms running Arista MOS, the configuration of a BGP password will cause the password to be logged in clear text that can be revealed in local logs or remote logging servers by authenticated users, as well as appear in clear text in the device’s running config.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Arista
Products
7130 7130-16g3s 7130-48g3s and 2 more
CVE-2019-17596

golang: invalid public key causes panic in dsa.Verify

Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.

CVSS 3.1 · 7.5 High EPSS 4.7% KEV · Not listed
Vendors
Arista Debian Fedoraproject and 3 more
Products
Cloudvision Portal Eos Mos and 10 more