Skip to content
OpenAdvisories
Medium WID-SEC-2024-3554 1 CVE

Arista EOS: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Published Nov 26, 2024 · Updated Nov 26, 2024 · de-DE

Vendor: Arista Networks Product: EOS

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Arista EOS ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

Product

Arista Extensible Operating System (EOS) ist ein modulares Linux basiertes Netzwerkbetriebssystem.

Vulnerabilities 1

  • Medium 5.8
    CVE-2024-6437

    On affected platforms running Arista EOS with one of the following features configured to redirect IP traffic to a next hop: policy-based routing (PBR), BGP Flowspec, or interface traffic policy -- certain IP traffic such as IPv4 packets with IP options ma

    On affected platforms running Arista EOS with one of the following features configured to redirect IP traffic to a next hop: policy-based routing (PBR), BGP Flowspec, or interface traffic policy -- certain IP traffic such as IPv4 packets with IP options may b…

    Arista Networks EOS-Policy Based Routing (PBR) EOS - Interface Traffic Policy EOS - BGP Flowspec Network devices

Revision history

  1. #1

    Initiale Fassung

References