CVE-2020-15898

Exploit

EPSS 0.21%
Veröffentlicht 28.12.2020 19:15:12
Zuletzt bearbeitet 21.11.2024 05:06:24
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

In Arista EOS malformed packets can be incorrectly forwarded across VLAN boundaries in one direction. This vulnerability is only susceptible to exploitation by unidirectional traffic (ex. UDP) and not bidirectional traffic (ex. TCP). This affects: EOS 7170 platforms version 4.21.4.1F and below releases in the 4.21.x train; EOS X-Series versions 4.21.11M and below releases in the 4.21.x train; 4.22.6M and below releases in the 4.22.x train; 4.23.4M and below releases in the 4.23.x train; 4.24.2.1F and below releases in the 4.24.x train.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Arista ≫ Eos Version >= 4.21.0f <= 4.21.4.1f

   Arista ≫ 7170-32c Version-
   Arista ≫ 7170-32cd Version-
   Arista ≫ 7170-64c Version-

Arista ≫ Eos Version >= 4.21.0f <= 4.21.11m

   Arista ≫ 7050cx3-32s Version-
   Arista ≫ 7050cx3m-32s Version-
   Arista ≫ 7050qx-32s Version-
   Arista ≫ 7050qx2-32s Version-
   Arista ≫ 7050sx-128 Version-
   Arista ≫ 7050sx-64 Version-
   Arista ≫ 7050sx-72q Version-
   Arista ≫ 7050sx2-128 Version-
   Arista ≫ 7050sx2-72q Version-
   Arista ≫ 7050sx3-48c8 Version-
   Arista ≫ 7050sx3-48yc Version-
   Arista ≫ 7050sx3-48yc12 Version-
   Arista ≫ 7050sx3-48yc8 Version-
   Arista ≫ 7050sx3-96yc8 Version-
   Arista ≫ 7050tx-48 Version-
   Arista ≫ 7050tx-64 Version-
   Arista ≫ 7050tx-72q Version-
   Arista ≫ 7050tx2-128 Version-
   Arista ≫ 7050tx3-48c8 Version-
   Arista ≫ 7060cx-32s Version-
   Arista ≫ 7060cx2-32s Version-
   Arista ≫ 7060dx4-32 Version-
   Arista ≫ 7060px4-32 Version-
   Arista ≫ 7060sx2-48yc6 Version-
   Arista ≫ 720xp-24y6 Version-
   Arista ≫ 720xp-24zy4 Version-
   Arista ≫ 720xp-48y6 Version-
   Arista ≫ 720xp-48zc2 Version-
   Arista ≫ 720xp-96zc2 Version-
   Arista ≫ 7250qx-64 Version-
   Arista ≫ 7260cx Version-
   Arista ≫ 7260cx3 Version-
   Arista ≫ 7260cx3-64 Version-
   Arista ≫ 7260qx Version-
   Arista ≫ 7300x-32q Version-
   Arista ≫ 7300x-64s Version-
   Arista ≫ 7300x-64t Version-
   Arista ≫ 7300x3-32c Version-
   Arista ≫ 7300x3-48yc4 Version-
   Arista ≫ 7304x3 Version-
   Arista ≫ 7308x3 Version-
   Arista ≫ 7320x-32c Version-
   Arista ≫ 7324x Version-
   Arista ≫ 7328x Version-
   Arista ≫ 7368x4 Version-

Arista ≫ Eos Version >= 4.22.0f <= 4.22.6m

Arista ≫ Eos Version >= 4.23.0f <= 4.23.4m

Arista ≫ Eos Version >= 4.24.0f <= 4.24.2.1f

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.21%	0.408

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

https://www.arista.com/en/support/advisories-notices/security-advisories/11996-security-advisory-56

Vendor Advisory

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2020-15898

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-15898

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-15898

EUVD