How many Arista Networks CloudVision Portal CVEs are in CISA KEV?

Yes — 1 of Arista Networks CloudVision Portal's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for Arista Networks CloudVision Portal vulnerabilities?

Yes — 1 of Arista Networks CloudVision Portal's CVEs have a known public exploit.

Which versions of Arista Networks CloudVision Portal are affected?

54 distinct Arista Networks CloudVision Portal versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Arista Networks CloudVision Portal CVEs?

Arista Networks CloudVision Portal's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-269 (Improper Privilege Management), CWE-284 (Improper Access Control), CWE-287 (Improper Authentication).

How many critical Arista Networks CloudVision Portal vulnerabilities are there?

Arista Networks CloudVision Portal has 3 critical and 6 high-severity CVEs.

What is the average severity of Arista Networks CloudVision Portal CVEs?

The average CVSS base score across Arista Networks CloudVision Portal's scored CVEs is 7.8.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Arista Networks

13 CVEs

1 in CISA KEV

Arista Networks CloudVision Portal Vulnerabilities

Name: Arista Networks CloudVision Portal vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for CloudVision Portal by Arista Networks.

13

Total CVEs

Published

1

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

7.8

Avg CVSS

2017–2026

Last updated April 22, 2026

Overview

Arista Networks CloudVision Portal has 13 published CVE records since 2017, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Arista Networks CloudVision Portal, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Arista Networks CloudVision Portal's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High6

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

1

One of Arista Networks CloudVision Portal's CVEs is confirmed exploited in the wild.

Public exploits

1

One of Arista Networks CloudVision Portal's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Arista Networks CloudVision Portal version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

2020.22 CVEs
2020.32 CVEs
2021.12 CVEs
2021.22 CVEs
2021.32 CVEs
2017.21 CVE
2018.11 CVE
2018.21 CVE
2019.11 CVE
2020.11 CVE
2022.11 CVE
2022.21 CVE
2022.31 CVE
2023.11 CVE
2023.21 CVE
2023.31 CVE
2024.3.01 CVE

Version ranges

2018.2.0 <= v <= 2018.2.32 CVEs
2024.2.0 <= v <= 2024.2.12 CVEs
< 2020.1.21 CVE
< 2020.2.01 CVE
<= 2016.1.2.01 CVE
<= 2018.1.11 CVE
>= 2024.3.01 CVE
2018.1.0 <= v <= 2018.1.41 CVE
2018.1.0 <= v <= 2018.2.31 CVE
2019.1.0 <= v <= 2019.1.01 CVE
2019.1.1 <= v <= 2019.1.11 CVE
2019.1.2 <= v <= 2019.1.21 CVE
2020.2.0 <= v <= 2022.1.01 CVE

Fixed in

> 2024.2.12 CVEs
> 2024.1.21 CVE
> 4.27.12M1 CVE
> 4.28.12M1 CVE
> 4.29.9M1 CVE
> 4.30.8M1 CVE
> 4.31.6M1 CVE
> 4.32.2F1 CVE
2020.1.21 CVE
2020.2.01 CVE

Find a version

13 CVEs

Sort

crypto: algif_aead - Revert to operating out-of-place
CVE-2026-31431
CISA KEV
Public exploit
Patch
Workaround
CWE-669
Added to CISA KEV 2026-05-01
High · CVSS 8.5
EPSS 94.5% (100th pct)2026-04-22
On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear.
CVE-2024-12378
Patch
Workaround
CWE-319
Critical · CVSS 9.1
EPSS 0.4% (36th pct)2025-05-08
Critical vulnerability · 2025-05-08
CVE-2024-11186
Patch
Workaround
CWE-287
Critical · CVSS 10.0
EPSS 0.6% (47th pct)2025-05-08
On Arista CloudVision systems (virtual or physical on-premise deployments), Zero Touch Provisioning can be used to gain admin privileges on the CloudVision system, with more permissions than necessary, which can be used to query or manipulate system state
CVE-2025-0505
Patch
Workaround
CWE-269
Critical · CVSS 10.0
EPSS 0.6% (44th pct)2025-05-08
High vulnerability · 2023-06-13
CVE-2023-24546CWE-284
High · CVSS 8.1
EPSS 0.5% (38th pct)2023-06-13
This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where under a certain set of conditions, user passwords can be leaked in the Audit and System logs. The impact of this vu ...
CVE-2022-29071
Patch
Workaround
CWE-200
Medium · CVSS 5.5
EPSS 0.2% (9th pct)2022-08-05
Medium vulnerability · 2020-09-22
CVE-2020-24333
Patch
Medium · CVSS 6.5
EPSS 0.8% (54th pct)2020-09-22
High vulnerability · 2020-06-06
CVE-2020-13881
Patch
High · CVSS 7.5
EPSS 1.7% (74th pct)2020-06-06
High vulnerability · 2019-12-19
CVE-2019-18181
High · CVSS 7.8
EPSS 0.3% (27th pct)2019-12-19
Medium vulnerability · 2019-12-19
CVE-2019-18615
Medium · CVSS 4.9
EPSS 0.5% (40th pct)2019-12-19
High vulnerability · 2019-10-24
CVE-2019-17596
Patch
High · CVSS 7.5
EPSS 4.7% (91th pct)2019-10-24
Medium vulnerability · 2019-08-15
CVE-2018-12357
Medium · CVSS 6.5
EPSS 0.8% (52th pct)2019-08-15
High vulnerability · 2017-01-23
CVE-2016-9012
High · CVSS 8.8
EPSS 1.5% (72th pct)2017-01-23

Common weakness types

The CWE weakness categories most often found in Arista Networks CloudVision Portal CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Arista Networks CloudVision Portal CVEs were published each year.

2017

1

2019

4

2020

2

2022

1

2023

1

2025

3

2026

1

Other Arista Networks products

Browse vulnerabilities for other products by Arista Networks.

EOS71 CVEs ng firewall20 CVEs 7500r3-24d10 CVEs 7500r3-24p10 CVEs 7500r3-36cq10 CVEs 7500r3k-36cq10 CVEs 7050cx3-32s9 CVEs 7050cx3m-32s9 CVEs

All Arista Networks vulnerabilities

Frequently asked questions

Common questions about Arista Networks CloudVision Portal vulnerabilities.

How many CVEs does Arista Networks CloudVision Portal have?: Arista Networks CloudVision Portal has 13 published CVE records since 2017.
How many Arista Networks CloudVision Portal CVEs are in CISA KEV?: Yes — 1 of Arista Networks CloudVision Portal's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Arista Networks CloudVision Portal vulnerabilities?: Yes — 1 of Arista Networks CloudVision Portal's CVEs have a known public exploit.
Which versions of Arista Networks CloudVision Portal are affected?: 54 distinct Arista Networks CloudVision Portal versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Arista Networks CloudVision Portal CVEs?: Arista Networks CloudVision Portal's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-269 (Improper Privilege Management), CWE-284 (Improper Access Control), CWE-287 (Improper Authentication).
How many critical Arista Networks CloudVision Portal vulnerabilities are there?: Arista Networks CloudVision Portal has 3 critical and 6 high-severity CVEs.
What is the average severity of Arista Networks CloudVision Portal CVEs?: The average CVSS base score across Arista Networks CloudVision Portal's scored CVEs is 7.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Arista Networks CloudVision Portal vulnerabilities

Monitor new Arista Networks CloudVision Portal vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

2021.1 <= v <= 2021.31 CVE

2022.1.0 <= v <= 2022.1.01 CVE

2022.1.1 <= v <= 2022.1.11 CVE

2022.2.0 <= v <= 2022.2.01 CVE

2022.2.1 <= v <= 2022.2.11 CVE

2022.3.0 <= v <= 2022.3.01 CVE

2024.1.0 <= v <= 2024.1.21 CVE

2024.2.0 <= v <= 2026.1.01 CVE

4.27.0 <= v <= 4.27.12M1 CVE

4.28.0 <= v <= 4.28.12M1 CVE

4.29.0 <= v <= 4.29.9M1 CVE

4.30.0 <= v <= 4.30.8M1 CVE

4.31.0 <= v <= 4.31.6M1 CVE

4.32.0 <= v <= 4.32.2F1 CVE