Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-6858 EUVD-2024-55610GHSA-gmrx-x399-mfhc

In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN.

Published Jun 4, 2026 · Updated Jun 5, 2026 · Assigned by Arista

Vendor: Arista Networks Product: EOS Category: Network devices

Description

In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN.

Affected products

VendorProductAffectedFixed
Arista Networks EOS 4.31.0 – ≤ 4.31.1F, 4.30.0 – ≤ 4.30.5M, 4.29.0 – ≤ 4.29.7M, 4.28.10 – ≤ 4.28.10.1M —

Advisories 1

References