Privilege Escalation in Arista EOS Products

⚠️ CVE-Referenzen: CVE-2026-73447
Arista Networks - Eos - CRITICAL - CVE-2026-73447. A privileged attacker can exploit a specific operation involving the gRPC Network Security Interface (gNSI) on Arista EOS-based products. This exploitation allows an authenticated user to escalate privileges and execute arbitrary OS commands through a specially crafted Certz Rotate request. Additionally, the Bootz service is also susceptible to this vulnerability, which poses a significant risk of full device compromise.
Quelle: securityvulnerability.io