CVE-2024-11185
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Summary
On affected platforms running Arista EOS, ingress traffic on Layer 2 ports may, under certain conditions, be improperly forwarded to ports associated with different VLANs, resulting in a breach of VLAN isolation and segmentation boundaries.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Arista Networks | EOS | 4.29.0 <= 4.29.10M | affected |
| Arista Networks | EOS | 4.30.0 <= 4.30.9M | affected |
| Arista Networks | EOS | 4.31.0 <= 4.31.6M | affected |
| Arista Networks | EOS | 4.32.0 <= 4.32.3M | affected |
| Arista Networks | EOS | 4.33.0 <= 4.33.1F | affected |
Weaknesses
- cwe-1189
Workarounds
There are no workarounds.
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.