Detections
Analytics

Arista Networks EOS eAPI Path Traversal Arbitrary File Read (SA0218)

high Nessus Plugin ID 380316

Synopsis

The version of Arista Networks EOS running on the remote device is affected by a path traversal vulnerability.

Description

The version of Arista Networks EOS running on the remote device is affected by a path traversal vulnerability as referenced in security advisory SA0218.

 - On affected EOS versions with the eAPI service enabled, a specially crafted HTTP request can allow an unauthenticated, remote attacker to read arbitrary files, including sensitive credentials from the switch filesystem. HTTPS, since it is HTTP over TLS, is also impacted by this issue. (CVE-2026-121371)

Note that the advisory states the conditions required for exploitation reflect default system configurations, so affected systems remain vulnerable without any custom or explicit configuration change. Nessus has not checked whether the vendor's default-services mitigation has been applied and has instead relied only on the application's self-reported version number.

Solution

Upgrade to Arista Networks EOS 4.33.11.2M / 4.34.9.2M / 4.35.7.2M / 4.36.3.2M / 4.37.0F or later, or apply the mitigation referenced in the vendor advisory.

See Also

http://www.nessus.org/u?4d48ff20

Plugin Details

Severity: High

ID: 380316

File Name: arista_eos_sa0218.nasl

Version: 1.1

Type: Combined

Family: Misc.

Published: 11/13/2026

Updated: 11/13/2026

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.79

CVSS v2

Risk Factor: High

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N

CVSS Score Source: CVE-2026-121371

CVSS v3

Risk Factor: High

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v4

Risk Factor: High

Base Score: 8.7

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Vulnerability Information

CPE: cpe:/o:arista:eos

Required KB Items: Host/Arista-EOS/Version

Patch Publication Date: 11/10/2026

Vulnerability Publication Date: 11/10/2026

Reference Information

CVE: CVE-2026-121371

IAVA: 2026-A-1294