Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-11185 EUVD-2024-54607GHSA-2m5h-jr5p-fjc8

On affected platforms running Arista EOS, ingress traffic on Layer 2 ports may, under certain conditions, be improperly forwarded to ports associated with different VLANs, resulting in a breach of VLAN isolation and segmentation boundaries.

Published May 27, 2025 · Updated May 28, 2025 · Assigned by Arista

Vendor: Arista Networks Product: EOS Category: Network devices

Description

On affected platforms running Arista EOS, ingress traffic on Layer 2 ports may, under certain conditions, be improperly forwarded to ports associated with different VLANs, resulting in a breach of VLAN isolation and segmentation boundaries.

Affected products

VendorProductAffectedFixed
Arista Networks EOS 4.29.0 – ≤ 4.29.10M, 4.30.0 – ≤ 4.30.9M, 4.31.0 – ≤ 4.31.6M, 4.32.0 – ≤ 4.32.3M, 4.33.0 – ≤ 4.33.1F —

Advisories 1

References