Mastodawn

I learned a few things about #Arista switches in the process.

- there's a full linux OS underneath, you can run anything on it, including plain bash
- the `aboot` loader also has bash

- there are 2 versions of the aboot loader with different zip formats used for loading EOS
- I couldn't upgrade the older boot loader to a newer one
- but you can repackage the newer one in the older format yourself

Their API & config setup is a pleasure to use in comparison to the fs.com ones I've got locally. Much more accessible and comprehensive documentation.

Hugo | DevOps | Cybersecurity 3d ago

CVE-2024-27892 - Critical supply chain attack in Arista EOS. gNMI bypass allows unauthorized config changes. CVSS 9.6. No patch available. Isolate affected systems now. #CVE #Arista #infosec

https://www.valtersit.com/cve/CVE-2024-27892/

CVE-2024-27892 | Platforms | Valters IT Hub

Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexp...

Valters IT Hub

Hugo | DevOps | Cybersecurity 3d ago

CVE-2024-27890 - Critical auth bypass in Arista EOS with OpenConfig. gNMI Set requests improperly accepted, risking unauthorized config changes. CVSS 9.6. No patch available yet. Monitor and restrict access now. #CVE #Arista #infosec

https://www.valtersit.com/cve/CVE-2024-27890/

CVE-2024-27890 | Platforms | Valters IT Hub

Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexp...

Valters IT Hub

50+ Music May 29

"End of the Road" is a song by American #RAndB group #BoyzIIMen for the Boomerang #soundtrack. It was released in June 1992 by #LaFace, #Arista and #Motown, and is written by #Babyface, Antonio #LAReid and #DarylSimmons. It is written and composed in the #key of #EflatMajor and is set in #timeSignature of 12/8 with a #tempo of 75 beats per minute. The song achieved domestic and international success. In the United States.
https://www.youtube.com/watch?v=zDKO6XYXioc

Boyz II Men - End Of The Road

YouTube

Peter J. Welcher May 28

I added new blog/article links to my NFD40 Blog Links listing, towards the end. See the  “Fresh Links” section of the URL below. Tags: #PeterWelcher #CCIE1773 #NFD40 #Arista #Cisco #Nokia #Netris #Aviz #Lightyear #NetAI #SelectorAI #UpscaleAI https://www.linkedin.com/pulse/nfd40-blog-links-listing-peter-welcher-if9ve/

Benjamin May 22

The #Arista community site is such a treasure of information. I regularly find answer to very specific questions such as this one : https://arista.my.site.com/AristaCommunity/s/question/0D55w0000BMF9kdCQD/how-to-mirror-filter-vxaln-vni (on how to filter mirrored packets, per-VNI, in hardware, so you do not overwhelm the CPU)

And having asked a question there, I was impressed by the response time from Arista employees !

#neteng

Arista Community

Peter J. Welcher May 21

Just posted: all the #NFD40 blog/article links I know of. Tags: #PeterWelcher #CCIE1773 #NFD40 #Arista #Cisco #Nokia #Netris #Aviz #Lightyear #NetAI #SelectorAI #UpscaleAI URL: https://www.linkedin.com/pulse/nfd40-blog-links-listing-peter-welcher-if9ve/

Simone Spinedi May 9

Quick BGP fixing...

When using Arista, remember to check it before 😬

#NetworkEngineering #Network #Engineer #BGP #Arista #containerlab

Peter J. Welcher Apr 21

What’s New with Arista networking for AI? Some highlights in NFD40: Arista Networking for AI. Including impressive high-capacity XPO optics. Tags: #PeterWelcher #CCIE1773 #NFD40 #NetworkingFieldDay #TechFieldDay #NetworkingForAI #AINetworking #Arista https://www.linkedin.com/pulse/nfd40-arista-networking-ai-peter-welcher-te3qe/

TrendAI Zero Day Initiative Feb 5

CVE-2025-6978: Arbitrary Code Execution in the #Arista NG Firewall - our researchers took a deep dive into this recently patched RCE to provide root cause and detection guidance. Read all the details at https://www.zerodayinitiative.com/blog/2026/2/4/cve-2025-6978-arbitrary-code-execution-in-the-arista-ng-firewall

Zero Day Initiative — CVE-2025-6978: Arbitrary Code Execution in the Arista NG Firewall

In this excerpt of a TrendAI Research Services vulnerability report, Jonathan Lein and Simon Humbert of the TrendAI Research team detail a recently patched command injection vulnerability in the Arista NG Firewall. This bug was originally discovered by Gereon Huppertz and reported through the Tren

Zero Day Initiative