Eos
Vendor:
First CVE: Sep 24, 2014 · Active for 11 years
69
Total CVEs
More Total CVEs than 98% of tracked products
5.8
Avg CVEs / Year
Higher CVE frequency than 90% of tracked products
7.0
Avg CVSS
Higher Avg CVSS than 42% of tracked products
4.3%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Eos over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 24, 2014
11 years ago
Most Recent CVE
Jun 5, 2026
49 days ago
CVE Severity & Scoring
Eos69 CVEs
41%
38%
14%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local3 (4.3%)
Network55 (79.7%)
Unknown4 (5.8%)
Physical0 (0.0%)
Adjacent Network7 (10.1%)
Attack Complexity
Low57 (82.6%)
High8 (11.6%)
Unknown4 (5.8%)
User Interaction
None63 (91.3%)
Unknown4 (5.8%)
Required2 (2.9%)
Privileges Required
Low17 (24.6%)
High3 (4.3%)
None45 (65.2%)
Unknown4 (5.8%)
Top CVEs
Signals from CVEs in this product scope (69 CVEs).
69 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-6271CRITICAL GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a cra | Sep 24, 2014 | 9.8 | 99 | YES | YES |
CVE-2014-7169CRITICAL GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to wri | Sep 25, 2014 | 9.8 | 98 | YES | YES |
CVE-2024-6387HIGH A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauth | Jul 1, 2024 | 8.1 | 89 | NO | YES |
CVE-2017-14491CRITICAL Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response. | Oct 4, 2017 | 9.8 | 85 | NO | YES |
CVE-2026-7473MEDIUM On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) t | Jun 5, 2026 | 5.8 | 69 | YES | NO |
CVE-2020-10188CRITICAL utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the net | Mar 6, 2020 | 9.8 | 68 | NO | NO |
CVE-2017-18017CRITICAL The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-a | Jan 3, 2018 | 9.8 | 60 | NO | NO |
CVE-2024-27890CRITICAL Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexpected configuration being | Jun 4, 2026 | 9.6 | 40 | NO | NO |
CVE-2024-27892CRITICAL Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexpected configuration being | Jun 4, 2026 | 9.6 | 38 | NO | NO |
CVE-2025-8873HIGH On affected platforms running Arista EOS with IPsec configured, a specially crafted packet can cause the dataplane to stop processing all IPsec traffic. The control plane may detec | Jun 4, 2026 | 7.5 | 31 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (69 CVEs).
CISA KEV
3 CVEs
4.3% of CVEs· 97th percentile
Metasploit
1 CVE
1.4% of CVEs· 96th percentile
Nuclei
1 CVE
1.4% of CVEs· 96th percentile
ExploitDB
5 CVEs
7.2% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (69 CVEs).
Media Mentions
Signals from CVEs in this product scope (69 CVEs).
Top CNAs Publishing CVEs For Eos
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 4.25.0f | 1 | 6.5 | 0.5% | 0 | 0 |
| 4.24.0f | 1 | 9.8 | 74.5% | 0 | 0 |
| 4.22.1f | 1 | 7.1 | 0.7% | 0 | 0 |
| 4.22.0f | 1 | 7.1 | 0.7% | 0 | 0 |
| 4.21.3f | 1 | 7.1 | 0.7% | 0 | 0 |
| 4.21.1f | 1 | 7.1 | 0.7% | 0 | 0 |
| 4.21.0f | 1 | 7.1 | 0.7% | 0 | 0 |
| 4.20.1fx-virtual-router | 1 | 9.8 | 52.8% | 0 | 0 |
| 4.20 | 1 | 7.5 | 1.0% | 0 | 0 |
| 4.19 | 1 | 7.5 | 1.0% | 0 | 0 |
| 4.18 | 1 | 7.5 | 1.0% | 0 | 0 |
| 4.17 | 1 | 7.5 | 1.0% | 0 | 0 |
| 4.16 | 1 | 7.5 | 1.0% | 0 | 0 |
| 4.15.2f | 1 | 10.0 | 4.2% | 0 | 0 |
| 4.15.1fxb | 1 | 10.0 | 4.2% | 0 | 0 |
| 4.15.1fx-7060x | 1 | 10.0 | 4.2% | 0 | 0 |
| 4.15.1fx-7060qx | 1 | 10.0 | 4.2% | 0 | 0 |
| 4.15.1f | 1 | 10.0 | 4.2% | 0 | 0 |
| 4.15.0fxa | 1 | 10.0 | 4.2% | 0 | 0 |
| 4.15.0fx1 | 1 | 10.0 | 4.2% | 0 | 0 |