CVE-2023-24510

EPSS 0.19%
Veröffentlicht 05.06.2023 22:15:11
Zuletzt bearbeitet 21.11.2024 07:48:01
Quelle psirt@arista.com
Teams Watchlist Login
Unerledigt Login

On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Arista ≫ Eos Version <= 4.25.10m

   Arista ≫ Ceos Version-
   Arista ≫ Cloudeos Version-
   Arista ≫ Veos Version-
   Arista ≫ 7010t Version-
   Arista ≫ 7010t-48 Version-
   Arista ≫ 7010tx-48 Version-
   Arista ≫ 7010tx-48-dc Version-
   Arista ≫ 7020r Version-
   Arista ≫ 7020sr-24c2 Version-
   Arista ≫ 7020sr-32c2 Version-
   Arista ≫ 7020tr-48 Version-
   Arista ≫ 7020tra-48 Version-
   Arista ≫ 7050cx3-32s Version-
   Arista ≫ 7050cx3m-32s Version-
   Arista ≫ 7050qx-32s Version-
   Arista ≫ 7050qx2-32s Version-
   Arista ≫ 7050sx-128 Version-
   Arista ≫ 7050sx-64 Version-
   Arista ≫ 7050sx-72q Version-
   Arista ≫ 7050sx2-128 Version-
   Arista ≫ 7050sx2-72q Version-
   Arista ≫ 7050sx3-48c8 Version-
   Arista ≫ 7050sx3-48yc Version-
   Arista ≫ 7050sx3-48yc12 Version-
   Arista ≫ 7050sx3-48yc8 Version-
   Arista ≫ 7050sx3-96yc8 Version-
   Arista ≫ 7050tx-48 Version-
   Arista ≫ 7050tx-64 Version-
   Arista ≫ 7050tx-72q Version-
   Arista ≫ 7050tx2-128 Version-
   Arista ≫ 7050tx3-48c8 Version-
   Arista ≫ 7060cx-32s Version-
   Arista ≫ 7060cx2-32s Version-
   Arista ≫ 7060dx4-32 Version-
   Arista ≫ 7060px4-32 Version-
   Arista ≫ 7060sx2-48yc6 Version-
   Arista ≫ 7130 Version-
   Arista ≫ 7130-16g3s Version-
   Arista ≫ 7130-48g3s Version-
   Arista ≫ 7130-96s Version-
   Arista ≫ 7150s-24 Version-
   Arista ≫ 7150s-52 Version-
   Arista ≫ 7150s-64 Version-
   Arista ≫ 7150sc-24 Version-
   Arista ≫ 7150sc-64 Version-
   Arista ≫ 7160-32cq Version-
   Arista ≫ 7160-48tc6 Version-
   Arista ≫ 7160-48yc6 Version-
   Arista ≫ 7170-32c Version-
   Arista ≫ 7170-32cd Version-
   Arista ≫ 7170-64c Version-
   Arista ≫ 7170b-64c Version-
   Arista ≫ 720df-48y Version-
   Arista ≫ 720dp-24s Version-
   Arista ≫ 720dp-48s Version-
   Arista ≫ 720dt-24s Version-
   Arista ≫ 720dt-48s Version-
   Arista ≫ 720dt-48y Version-
   Arista ≫ 720xp-24y6 Version-
   Arista ≫ 720xp-24zy4 Version-
   Arista ≫ 720xp-48y6 Version-
   Arista ≫ 720xp-48zc2 Version-
   Arista ≫ 720xp-96zc2 Version-
   Arista ≫ 722xpm-48y4 Version-
   Arista ≫ 722xpm-48zy8 Version-
   Arista ≫ 7250qx-64 Version-
   Arista ≫ 7260cx Version-
   Arista ≫ 7260cx3 Version-
   Arista ≫ 7260cx3-64 Version-
   Arista ≫ 7260qx Version-
   Arista ≫ 7260qx-64 Version-
   Arista ≫ 7260sx2 Version-
   Arista ≫ 7280e Version-
   Arista ≫ 7280r2 Version-
   Arista ≫ 7280r3 Version-
   Arista ≫ 7300x-32q Version-
   Arista ≫ 7300x-64s Version-
   Arista ≫ 7300x-64t Version-
   Arista ≫ 7300x3-32c Version-
   Arista ≫ 7300x3-48yc4 Version-
   Arista ≫ 7320x-32c Version-
   Arista ≫ 7358x4 Version-
   Arista ≫ 7368x4 Version-
   Arista ≫ 7388x5 Version-
   Arista ≫ 750 Version-
   Arista ≫ 7500e Version-
   Arista ≫ 7500r Version-
   Arista ≫ 7500r2 Version-
   Arista ≫ 7500r3 Version-
   Arista ≫ 7500r3-24d Version-
   Arista ≫ 7500r3-24p Version-
   Arista ≫ 7500r3-36cq Version-
   Arista ≫ 7500r3k-36cq Version-
   Arista ≫ 7800r3-36p Version-
   Arista ≫ 7800r3-48cq Version-
   Arista ≫ 7800r3k-48cq Version-

Arista ≫ Eos Version >= 4.26.0 < 4.26.10m

Arista ≫ Eos Version >= 4.27.0 < 4.27.10m

Arista ≫ Eos Version >= 4.28.0 < 4.28.7m

Arista ≫ Eos Version >= 4.29.0 < 4.29.2f

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.19%	0.41

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
psirt@arista.com	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-755 Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

https://www.arista.com/en/support/advisories-notices/security-advisory/17445-security-advisory-0087

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-24510

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-24510

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-24510

EUVD