{"document":{"aggregate_severity":{"text":"hoch"},"category":"csaf_base","csaf_version":"2.0","distribution":{"tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"de-DE","notes":[{"category":"legal_disclaimer","text":"Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."},{"category":"description","text":"Arista Extensible Operating System (EOS) ist ein modulares Linux basiertes Netzwerkbetriebssystem.","title":"Produktbeschreibung"},{"category":"summary","text":"Ein Angreifer kann mehrere Schwachstellen in Arista EOS ausnutzen, um erweiterte Berechtigungen, sogar Administratorrechte, zu erlangen, beliebigen Code, einschließlich Root-Code, auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen sowie Denial-of-Service-Zustände herbeizuführen.","title":"Angriff"},{"category":"general","text":"- UNIX","title":"Betroffene Betriebssysteme"}],"publisher":{"category":"other","contact_details":"csaf-provider@cert-bund.de","name":"Bundesamt für Sicherheit in der Informationstechnik","namespace":"https://www.bsi.bund.de"},"references":[{"category":"self","summary":"WID-SEC-W-2026-3287 - CSAF Version","url":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3287.json"},{"category":"self","summary":"WID-SEC-2026-3287 - Portal Version","url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3287"},{"category":"external","summary":"Arista Security Advisory vom 2026-09-09","url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24711-security-advisory-0155"},{"category":"external","summary":"Arista Security Advisory vom 2026-09-09","url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24712-security-advisory-0156"},{"category":"external","summary":"Arista Security Advisory vom 2026-09-09","url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24713-security-advisory-0157"},{"category":"external","summary":"Arista Security Advisory vom 2026-09-09","url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24714-security-advisory-0158"},{"category":"external","summary":"Arista Security Advisory vom 2026-09-09","url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24715-security-advisory-0159"},{"category":"external","summary":"Arista Security Advisory vom 2026-09-09","url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24716-security-advisory-0160"},{"category":"external","summary":"Arista Security Advisory vom 2026-09-09","url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24717-security-advisory-0161"},{"category":"external","summary":"Arista Security Advisory vom 2026-09-09","url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24718-security-advisory-0162"},{"category":"external","summary":"Arista Security Advisory vom 2026-09-09","url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24719-security-advisory-0163"},{"category":"external","summary":"Arista Security Advisory vom 2026-09-09","url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24720-security-advisory-0164"},{"category":"external","summary":"Arista Security Advisory vom 2026-09-09","url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24729-security-advisory-0173"},{"category":"external","summary":"Arista Security Advisory vom 2026-09-09","url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24730-security-advisory-0174"},{"category":"external","summary":"Arista Security Advisory vom 2026-09-09","url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24731-security-advisory-0175"},{"category":"external","summary":"Arista Security Advisory vom 2026-09-09","url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24732-security-advisory-0176"},{"category":"external","summary":"Arista Security Advisory vom 2026-09-09","url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24733-security-advisory-0177"},{"category":"external","summary":"Arista Security Advisory vom 2026-09-09","url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24734-security-advisory-0178"},{"category":"external","summary":"Arista Security Advisory vom 2026-09-09","url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24735-security-advisory-0179"},{"category":"external","summary":"Arista Security Advisory vom 2026-09-09","url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24736-security-advisory-0180"}],"source_lang":"en-US","title":"Arista EOS: Mehrere Schwachstellen","tracking":{"current_release_date":"2026-09-09T22:00:00.000+00:00","generator":{"date":"2026-09-10T12:46:35.818+00:00","engine":{"name":"BSI-WID","version":"1.6.0"}},"id":"WID-SEC-W-2026-3287","initial_release_date":"2026-09-09T22:00:00.000+00:00","revision_history":[{"date":"2026-09-09T22:00:00.000+00:00","number":"1","summary":"Initiale Fassung"}],"status":"final","version":"1"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_version_range","name":"<4.35.6M","product":{"name":"Arista EOS <4.35.6M","product_id":"T059359"}},{"category":"product_version","name":"4.35.6M","product":{"name":"Arista EOS 4.35.6M","product_id":"T059359-fixed","product_identification_helper":{"cpe":"cpe:/o:arista:arista_eos:4.35.6m"}}},{"category":"product_version_range","name":"<4.34.8M","product":{"name":"Arista EOS <4.34.8M","product_id":"T059360"}},{"category":"product_version","name":"4.34.8M","product":{"name":"Arista EOS 4.34.8M","product_id":"T059360-fixed","product_identification_helper":{"cpe":"cpe:/o:arista:arista_eos:4.34.8m"}}},{"category":"product_version_range","name":"<4.36.2F","product":{"name":"Arista EOS <4.36.2F","product_id":"T059361"}},{"category":"product_version","name":"4.36.2F","product":{"name":"Arista EOS 4.36.2F","product_id":"T059361-fixed","product_identification_helper":{"cpe":"cpe:/o:arista:arista_eos:4.36.2f"}}},{"category":"product_version_range","name":"<4.33.10M","product":{"name":"Arista EOS <4.33.10M","product_id":"T059362"}},{"category":"product_version","name":"4.33.10M","product":{"name":"Arista EOS 4.33.10M","product_id":"T059362-fixed","product_identification_helper":{"cpe":"cpe:/o:arista:arista_eos:4.33.10m"}}}],"category":"product_name","name":"EOS"}],"category":"vendor","name":"Arista"}]},"vulnerabilities":[{"cve":"CVE-2026-19655","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-19655"},{"cve":"CVE-2026-73437","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-73437"},{"cve":"CVE-2026-73439","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-73439"},{"cve":"CVE-2026-73440","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-73440"},{"cve":"CVE-2026-73442","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-73442"},{"cve":"CVE-2026-73443","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-73443"},{"cve":"CVE-2026-73444","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-73444"},{"cve":"CVE-2026-73446","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-73446"},{"cve":"CVE-2026-73447","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-73447"},{"cve":"CVE-2026-73450","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-73450"},{"cve":"CVE-2026-73453","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-73453"},{"cve":"CVE-2026-73455","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-73455"},{"cve":"CVE-2026-73456","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-73456"},{"cve":"CVE-2026-73457","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-73457"},{"cve":"CVE-2026-73459","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-73459"},{"cve":"CVE-2026-73460","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-73460"},{"cve":"CVE-2026-73461","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-73461"},{"cve":"CVE-2026-73462","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-73462"},{"cve":"CVE-2026-73468","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-73468"},{"cve":"CVE-2026-73469","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-73469"},{"cve":"CVE-2026-77190","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-77190"},{"cve":"CVE-2026-86106","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-86106"},{"cve":"CVE-2026-86107","product_status":{"known_affected":["T059360","T059362","T059361","T059359"]},"release_date":"2026-09-09T22:00:00.000+00:00","title":"CVE-2026-86107"}]}