WID-SEC-W-2024-1695

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Arista EOS: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

view advisory published 2024-07-23

Ein entfernter, anonymer Angreifer oder ein Angreifer aus dem angrenzenden Netzwerk kann mehrere Schwachstellen in Arista EOS ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2024-27891US——
On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports. T…
CVE-2024-6858US——
In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan