Summary
Ein entfernter, anonymer Angreifer oder ein Angreifer aus dem angrenzenden Netzwerk kann mehrere Schwachstellen in Arista EOS ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
Product
Arista Extensible Operating System (EOS) ist ein modulares Linux basiertes Netzwerkbetriebssystem.
Vulnerabilities 2
-
Medium 6.5
In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN.
In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN.
-
Medium 5.3
On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports.
On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports. This can cause outgoing packets to incorrectly be allowed or denied.
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2024-55610, EUVD-2024-55611
-
#1
Initiale Fassung
References
-
Arista Security Advisory vom 2024-07-23
https://www.arista.com/en/support/advisories-notices/security-advisory/19908-security-advisory-0102
-
Arista Security Advisory vom 2024-07-23
https://www.arista.com/en/support/advisories-notices/security-advisory/19917-security-advisory-0103