CVE-2024-12378
9.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Summary
On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Arista Networks | CloudVision Portal | 4.32.0 <= 4.32.2F | affected |
| Arista Networks | CloudVision Portal | 4.31.0 <= 4.31.6M | affected |
| Arista Networks | CloudVision Portal | 4.30.0 <= 4.30.8M | affected |
| Arista Networks | CloudVision Portal | 4.29.0 <= 4.29.9M | affected |
| Arista Networks | CloudVision Portal | 4.28.0 <= 4.28.12M | affected |
| Arista Networks | CloudVision Portal | 4.27.0 <= 4.27.12M | affected |
Weaknesses
- CWE-319: CWE-319 Cleartext Transmission of Sensitive Information
Workarounds
The workaround is to remove and re-apply security profiles for each secure VTEP.
switch> show vxlan security profile VTEP Security Profile
1.0.2.1 p1 switch> en switch# config switch(config)# interface vxlan 1 switch(config-if-Vx1)# no vxlan vtep 1.0.2.1 ip security profile p1 switch(config-if-Vx1)# vxlan vtep 1.0.2.1 ip security profile p1
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.