What’s Vulnerable › Vulnerabilities

CVE-2025-8870: On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.

• Severity: medium (CVSS 4.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-14 · updated 2026-10-07
• Weakness: CWE-248

Description

On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.153

Affected products

• Arista Networks EOS: 4.34.2FX

References

• https://www.arista.com/en/support/advisories-notices/security-advisory/22811-security-advisory-0125

Get alerted when CVE-2025-8870 or the next vulnerability affects your stack