CVE-2015-8236
N/A
Published: November 19, 2015 at 11:00 AM UTC
Updated: June 17, 2026 at 12:34 AM UTC
1 product affected across 1 vendorEos
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 4%
Description
Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and 4.15 before 4.15.0FX1.1 allows remote attackers to execute arbitrary code as root by leveraging management-plane access, aka Bug 138716.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 4.11.114.12.104.12.5.24.12.6.14.12.7.14.12.84.12.8.14.12.94.13.1.1f4.13.10m4.13.11m4.13.12m4.13.13m4.13.2.1f4.13.3.1f4.13.4.1f4.13.54.13.5.1f4.13.64.13.7.2m4.13.7.3m4.13.7m4.13.8m4.13.9.1m4.13.9m4.14.0f4.14.1f4.14.2f4.14.3.1f4.14.3f4.14.4.1f4.14.4.2f4.14.4f4.14.5.1f-ssu4.14.5f4.14.5fx4.14.5fx.14.14.5fx.24.14.5fx.34.14.5fx.44.14.6f4.14.7.1f4.14.7f4.14.8.1f4.14.8f4.14.94.15.0f4.15.0fx4.15.0fx14.15.0fxa4.15.1f4.15.1fx-7060qx4.15.1fx-7060x4.15.1fxb4.15.2f
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (1)
x_refsource_CONFIRMVendor Advisory
Source: [email protected]
https://www.arista.com/support/advisories-notices/security-advisories/1221-security-advisory-15Quick Info
StatusMODIFIED
CWE
CWE-264
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card