Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and 4.15 before 4.15.0FX1.1 allows remote attackers to execute arbitrary code as root by leveraging management-plane access, aka Bug 138716.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8236
Reference (s):
- https://www.arista.com/support/advisories-notices/security-advisories/1221-security-advisory-15