The Arista network device must be running an operating system release that is currently supported by the vendor.

An XCCDF Rule

Description

<VulnDiscussion>Network devices running an unsupported operating system lack current security fixes required to mitigate the risks associated with recent vulnerabilities.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>

ID: SV-255967r961863_rule
Severity: High
References: CCI-000366
Updated: 17 days ago

Upgrade the Arista network device to an operating system that is supported by the vendor.

Step 1: The Administrator would log on to www.arista.com/support/software-download website and choose EOS/Active Releases and choose appropriate version of EOS to download.

Step 2: Transfer the EOS-4.x.yz.swi.sha512sum to Arista network device directory "flash:".
 Step 3: From the EOS CLI, type dir flash: to verify the file EOS-4.x.yz.swi.sha512sum is in the directory "flash:".

switch#directory flash:
EOS-4.x.yz.swi.sha512sum

Step 4: Use the command verify to verify the checksum sha512sum:

switch#verify flash: /sha512 flash:EOS-4.x.yz
checksum should match

Step 5: The file can also be verified from bash.

switch#bash
#bash
# sha512sum  /mnt/flash/EOS-4.x.yz
*note the Arista network device would not run an invalid version of EOS and if the checksum does not match, contact an Arista Representative for assistance.

The Arista network device must be running an operating system release that is currently supported by the vendor.

Description

Remediation - Manual Procedure