Description
On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, and routing enabled on the access VLAN of the ports, a malicious supplicant may be able to bypass the requirement to perform 802.1x authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arista Networks | EOS | 4.31.0 – ≤ 4.31.0F, 4.30.0 – ≤ 4.30.4M, 4.29.0 – ≤ 4.29.6M, 4.28.0 – ≤ 4.28.8M, 4.27.0 – ≤ 4.27.11M, 4.26.0 – ≤ 4.26.11M, 4.25.0 – ≤ 4.25.11M, 4.24.0 – ≤ 4.24.11M | — |
Advisories 1
- WID-SEC-2024-1205 Arista EOS: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Jun 4, 2026