Privilege Escalation in Arista EOS Products
⚠️ CVE-Referenzen:
CVE-2026-73447
Arista Networks - Eos - CRITICAL - CVE-2026-73447.
A privileged attacker can exploit a specific operation involving the gRPC Network Security Interface (gNSI) on Arista EOS-based products. This exploitation allows an authenticated user to escalate privileges and execute arbitrary OS commands through a specially crafted Certz Rotate request. Additionally, the Bootz service is also susceptible to this vulnerability, which poses a significant risk of full device compromise.
Quelle: securityvulnerability.io