CVE-2020-26569

Exploit

EPSS 0.39%
Published 28.12.2020 16:15:12
Last modified 21.11.2024 05:20:06
Source cve@mitre.org
Teams watchlist Login
Open Login

In EVPN VxLAN setups in Arista EOS, specific malformed packets can lead to incorrect MAC to IP bindings and as a result packets can be incorrectly forwarded across VLAN boundaries. This can result in traffic being discarded on the receiving VLAN. This affects versions: 4.21.12M and below releases in the 4.21.x train; 4.22.7M and below releases in the 4.22.x train; 4.23.5M and below releases in the 4.23.x train; 4.24.2F and below releases in the 4.24.x train.

Affected products Warnungen 0 Metrics 3 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Arista ≫ Eos Version >= 4.21.0f <= 4.21.12m

   Arista ≫ 7010t-48 Version-
   Arista ≫ 7050cx3-32s Version-
   Arista ≫ 7050cx3m-32s Version-
   Arista ≫ 7050qx-32s Version-
   Arista ≫ 7050qx2-32s Version-
   Arista ≫ 7050sx-128 Version-
   Arista ≫ 7050sx-64 Version-
   Arista ≫ 7050sx-72q Version-
   Arista ≫ 7050sx2-128 Version-
   Arista ≫ 7050sx2-72q Version-
   Arista ≫ 7050sx3-48c8 Version-
   Arista ≫ 7050sx3-48yc Version-
   Arista ≫ 7050sx3-48yc12 Version-
   Arista ≫ 7050sx3-48yc8 Version-
   Arista ≫ 7050sx3-96yc8 Version-
   Arista ≫ 7050tx-48 Version-
   Arista ≫ 7050tx-64 Version-
   Arista ≫ 7050tx-72q Version-
   Arista ≫ 7050tx2-128 Version-
   Arista ≫ 7050tx3-48c8 Version-
   Arista ≫ 7060cx-32s Version-
   Arista ≫ 7060cx2-32s Version-
   Arista ≫ 7060dx4-32 Version-
   Arista ≫ 7060px4-32 Version-
   Arista ≫ 7060sx2-48yc6 Version-
   Arista ≫ 720xp-24y6 Version-
   Arista ≫ 720xp-24zy4 Version-
   Arista ≫ 720xp-48y6 Version-
   Arista ≫ 720xp-48zc2 Version-
   Arista ≫ 720xp-96zc2 Version-
   Arista ≫ 7250qx-64 Version-
   Arista ≫ 7260cx Version-
   Arista ≫ 7260cx3 Version-
   Arista ≫ 7260cx3-64 Version-
   Arista ≫ 7260qx Version-
   Arista ≫ 7300x-32q Version-
   Arista ≫ 7300x-64s Version-
   Arista ≫ 7300x-64t Version-
   Arista ≫ 7300x3-32c Version-
   Arista ≫ 7300x3-48yc4 Version-
   Arista ≫ 7304x3 Version-
   Arista ≫ 7308x3 Version-
   Arista ≫ 7320x-32c Version-
   Arista ≫ 7324x Version-
   Arista ≫ 7328x Version-
   Arista ≫ 7368x4 Version-

Arista ≫ Eos Version >= 4.22.0f <= 4.22.7m

Arista ≫ Eos Version >= 4.23.0f <= 4.23.5m

Arista ≫ Eos Version >= 4.24.0f <= 4.24.2f

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.39%	0.57

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.9	2.2	3.6	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

https://www.arista.com/en/support/advisories-notices/security-advisories/11997-security-advisory-57

Vendor Advisory

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2020-26569

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-26569

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-26569

EUVD