Description
On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports. This can cause outgoing packets to incorrectly be allowed or denied.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arista Networks | EOS | 4.32.0 – ≤ 4.32.0.1F, 4.31.0 – ≤ 4.31.2F, 4.30.0 – ≤ 4.30.6M, 4.29.0 – ≤ 4.29.7M, 4.28.0 – ≤ 4.28.10.1M, 4.27.2F – < 4.28.0 | 4.28.0 |
Advisories 1
- WID-SEC-2024-1695 Arista EOS: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Jun 4, 2026