CVE-2015-8236: Arista Eos

High severity, CVSS 10.0. EPSS: 4.2% chance of exploitation in the next 30 days.

Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and 4.15 before 4.15.0FX1.1 allows remote attackers to execute arbitrary code as root by leveraging management-plane access, aka Bug 138716.

Affected products

• Arista Eos: up to and including 4.11.11; version 4.12.5.2 only; version 4.12.6.1 only; version 4.12.7.1 only; version 4.12.8 only; version 4.12.8.1 only; …

Published 2015-11-19. Last modified 2026-06-17.