{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "Arista Extensible Operating System (EOS) ist ein modulares Linux basiertes Netzwerkbetriebssystem.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in Arista EOS ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren, einen Denial of Service zu verursachen und in einem Fall möglicherweise Code ausführen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Appliance",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-4509 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4509.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-4509 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4509"
    }, {
      "category" : "external",
      "summary" : "Arista Security Advisory 0215 vom 2026-11-10",
      "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/25037-security-advisory-0215"
    }, {
      "category" : "external",
      "summary" : "Arista Security Advisory 0216 vom 2026-11-10",
      "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/25038-security-advisory-0216"
    }, {
      "category" : "external",
      "summary" : "Arista Security Advisory 0217 vom 2026-11-10",
      "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/25039-security-advisory-0217"
    }, {
      "category" : "external",
      "summary" : "Arista Security Advisory 0218 vom 2026-11-10",
      "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/25040-security-advisory-0218"
    }, {
      "category" : "external",
      "summary" : "Arista Security Advisory 0219 vom 2026-11-10",
      "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/25041-security-advisory-0219"
    }, {
      "category" : "external",
      "summary" : "Arista Security Advisory 0220 vom 2026-11-10",
      "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/25042-security-advisory-0220"
    }, {
      "category" : "external",
      "summary" : "Arista Security Advisory 0221 vom 2026-11-10",
      "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/25043-security-advisory-0221"
    }, {
      "category" : "external",
      "summary" : "Arista Security Advisory 0222 vom 2026-11-10",
      "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/25044-security-advisory-0222"
    }, {
      "category" : "external",
      "summary" : "Arista Security Advisory 0223 vom 2026-11-10",
      "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/25045-security-advisory-0223"
    }, {
      "category" : "external",
      "summary" : "Arista Security Advisory 0224 vom 2026-11-10",
      "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/25046-security-advisory-0224"
    }, {
      "category" : "external",
      "summary" : "Arista Security Advisory 0205 vom 2026-11-10",
      "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/25027-security-advisory-0205"
    }, {
      "category" : "external",
      "summary" : "Arista Security Advisory 0206 vom 2026-11-10",
      "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/25028-security-advisory-0206"
    }, {
      "category" : "external",
      "summary" : "Arista Security Advisory 0207 vom 2026-11-10",
      "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/25029-security-advisory-0207"
    }, {
      "category" : "external",
      "summary" : "Arista Security Advisory 0208 vom 2026-11-10",
      "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/25030-security-advisory-0208"
    }, {
      "category" : "external",
      "summary" : "Arista Security Advisory 0209 vom 2026-11-10",
      "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/25031-security-advisory-0209"
    }, {
      "category" : "external",
      "summary" : "Arista Security Advisory 0210 vom 2026-11-10",
      "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/25032-security-advisory-0210"
    }, {
      "category" : "external",
      "summary" : "Arista Security Advisory 0211 vom 2026-11-10",
      "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/25033-security-advisory-0211"
    }, {
      "category" : "external",
      "summary" : "Arista Security Advisory 0212 vom 2026-11-10",
      "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/25034-security-advisory-0212"
    }, {
      "category" : "external",
      "summary" : "Arista Security Advisory 0213 vom 2026-11-10",
      "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/25035-security-advisory-0213"
    }, {
      "category" : "external",
      "summary" : "Arista Security Advisory 0214 vom 2026-11-10",
      "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/25036-security-advisory-0214"
    }, {
      "category" : "external",
      "summary" : "Arista Security Advisory 0225 vom 2026-11-10",
      "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/25047-security-advisory-0225"
    } ],
    "source_lang" : "en-US",
    "title" : "Arista EOS: Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-11-10T23:00:00.000+00:00",
      "generator" : {
        "date" : "2026-11-11T14:24:04.002+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.7.0"
        }
      },
      "id" : "WID-SEC-W-2026-4509",
      "initial_release_date" : "2026-11-10T23:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-11-10T23:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      } ],
      "status" : "final",
      "version" : "1"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<4.37.0F",
          "product" : {
            "name" : "Arista EOS <4.37.0F",
            "product_id" : "T062811"
          }
        }, {
          "category" : "product_version",
          "name" : "4.37.0F",
          "product" : {
            "name" : "Arista EOS 4.37.0F",
            "product_id" : "T062811-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/o:arista:arista_eos:4.37.0f"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<4.36.3.2M",
          "product" : {
            "name" : "Arista EOS <4.36.3.2M",
            "product_id" : "T062812"
          }
        }, {
          "category" : "product_version",
          "name" : "4.36.3.2M",
          "product" : {
            "name" : "Arista EOS 4.36.3.2M",
            "product_id" : "T062812-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/o:arista:arista_eos:4.36.3.2m"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<4.35.7.2M",
          "product" : {
            "name" : "Arista EOS <4.35.7.2M",
            "product_id" : "T062813"
          }
        }, {
          "category" : "product_version",
          "name" : "4.35.7.2M",
          "product" : {
            "name" : "Arista EOS 4.35.7.2M",
            "product_id" : "T062813-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/o:arista:arista_eos:4.35.7.2m"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<4.34.9.2M",
          "product" : {
            "name" : "Arista EOS <4.34.9.2M",
            "product_id" : "T062814"
          }
        }, {
          "category" : "product_version",
          "name" : "4.34.9.2M",
          "product" : {
            "name" : "Arista EOS 4.34.9.2M",
            "product_id" : "T062814-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/o:arista:arista_eos:4.34.9.2m"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<4.33.11.2M",
          "product" : {
            "name" : "Arista EOS <4.33.11.2M",
            "product_id" : "T062815"
          }
        }, {
          "category" : "product_version",
          "name" : "4.33.11.2M",
          "product" : {
            "name" : "Arista EOS 4.33.11.2M",
            "product_id" : "T062815-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/o:arista:arista_eos:4.33.11.2m"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<4.28.14M",
          "product" : {
            "name" : "Arista EOS <4.28.14M",
            "product_id" : "T062816"
          }
        }, {
          "category" : "product_version",
          "name" : "4.28.14M",
          "product" : {
            "name" : "Arista EOS 4.28.14M",
            "product_id" : "T062816-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/o:arista:arista_eos:4.28.14m"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "EOS"
      } ],
      "category" : "vendor",
      "name" : "Arista"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-120974",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-120974"
  }, {
    "cve" : "CVE-2026-120975",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-120975"
  }, {
    "cve" : "CVE-2026-120976",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-120976"
  }, {
    "cve" : "CVE-2026-120977",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-120977"
  }, {
    "cve" : "CVE-2026-120978",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-120978"
  }, {
    "cve" : "CVE-2026-120979",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-120979"
  }, {
    "cve" : "CVE-2026-120980",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-120980"
  }, {
    "cve" : "CVE-2026-120981",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-120981"
  }, {
    "cve" : "CVE-2026-120982",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-120982"
  }, {
    "cve" : "CVE-2026-120983",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-120983"
  }, {
    "cve" : "CVE-2026-121286",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-121286"
  }, {
    "cve" : "CVE-2026-121287",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-121287"
  }, {
    "cve" : "CVE-2026-121288",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-121288"
  }, {
    "cve" : "CVE-2026-121289",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-121289"
  }, {
    "cve" : "CVE-2026-121290",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-121290"
  }, {
    "cve" : "CVE-2026-121291",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-121291"
  }, {
    "cve" : "CVE-2026-121292",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-121292"
  }, {
    "cve" : "CVE-2026-121293",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-121293"
  }, {
    "cve" : "CVE-2026-121294",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-121294"
  }, {
    "cve" : "CVE-2026-121295",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-121295"
  }, {
    "cve" : "CVE-2026-121367",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-121367"
  }, {
    "cve" : "CVE-2026-121368",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-121368"
  }, {
    "cve" : "CVE-2026-121369",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-121369"
  }, {
    "cve" : "CVE-2026-121370",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-121370"
  }, {
    "cve" : "CVE-2026-121371",
    "product_status" : {
      "known_affected" : [ "T062815", "T062816", "T062811", "T062812", "T062813", "T062814" ]
    },
    "release_date" : "2026-11-10T23:00:00.000+00:00",
    "title" : "CVE-2026-121371"
  } ]
}