7.5

CVE-2023-3646

Exploit

On affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel panic and cause system reload.

On affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel panic and cause system reload.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Arista ≫ Eos Version >= 4.28.2f <= 4.28.5.1m
   Arista ≫ 7280cr3-32d4 Version -
   Arista ≫ 7280cr3-32p4 Version -
   Arista ≫ 7280cr3-36s Version -
   Arista ≫ 7280cr3-96 Version -
   Arista ≫ 7280cr3a-24d12 Version -
   Arista ≫ 7280cr3a-48d6 Version -
   Arista ≫ 7280cr3a-72 Version -
   Arista ≫ 7280dr3-24 Version -
   Arista ≫ 7280dr3a-36 Version -
   Arista ≫ 7280dr3a-54 Version -
   Arista ≫ 7280dr3ak-36 Version -
   Arista ≫ 7280dr3ak-54 Version -
   Arista ≫ 7280dr3am-36 Version -
   Arista ≫ 7280dr3am-54 Version -
   Arista ≫ 7280pr3-24 Version -
   Arista ≫ 7280r3 Version -
   Arista ≫ 7280sr3-40yc6 Version -
   Arista ≫ 7280sr3-48yc8 Version -
   Arista ≫ 7280tr3-40c6 Version -
   Arista ≫ 7289r3a-sc Version -
   Arista ≫ 7289r3ak-sc Version -
   Arista ≫ 7289r3am-sc Version -
   Arista ≫ 7500r3-24d Version -
   Arista ≫ 7500r3-24p Version -
   Arista ≫ 7500r3-36cq Version -
   Arista ≫ 7500r3k-36cq Version -
   Arista ≫ 7500r3k-48y4d Version -
   Arista ≫ 7504r3 Version -
   Arista ≫ 7508r3 Version -
   Arista ≫ 7512r3 Version -
   Arista ≫ 7800r3-36d Version -
   Arista ≫ 7800r3-36p Version -
   Arista ≫ 7800r3-48cq Version -
   Arista ≫ 7800r3a-36d Version -
   Arista ≫ 7800r3a-36dm Version -
   Arista ≫ 7800r3a-36p Version -
   Arista ≫ 7800r3a-36pm Version -
   Arista ≫ 7800r3ak-36dm Version -
   Arista ≫ 7800r3ak-36pm Version -
   Arista ≫ 7800r3k-36dm Version -
   Arista ≫ 7800r3k-48cq Version -
   Arista ≫ 7800r3k-48cqms Version -
   Arista ≫ 7800r3k-72y7512r3 Version -
   Arista ≫ 7808r3 Version -
   Arista ≫ 7812r3 Version -
   Arista ≫ 7816r3 Version -
Arista ≫ Eos Version >= 4.29.0 < 4.29.2f
   Arista ≫ 7280cr3-32d4 Version -
   Arista ≫ 7280cr3-32p4 Version -
   Arista ≫ 7280cr3-36s Version -
   Arista ≫ 7280cr3-96 Version -
   Arista ≫ 7280cr3a-24d12 Version -
   Arista ≫ 7280cr3a-48d6 Version -
   Arista ≫ 7280cr3a-72 Version -
   Arista ≫ 7280dr3-24 Version -
   Arista ≫ 7280dr3a-36 Version -
   Arista ≫ 7280dr3a-54 Version -
   Arista ≫ 7280dr3ak-36 Version -
   Arista ≫ 7280dr3ak-54 Version -
   Arista ≫ 7280dr3am-36 Version -
   Arista ≫ 7280dr3am-54 Version -
   Arista ≫ 7280pr3-24 Version -
   Arista ≫ 7280r3 Version -
   Arista ≫ 7280sr3-40yc6 Version -
   Arista ≫ 7280sr3-48yc8 Version -
   Arista ≫ 7280tr3-40c6 Version -
   Arista ≫ 7289r3a-sc Version -
   Arista ≫ 7289r3ak-sc Version -
   Arista ≫ 7289r3am-sc Version -
   Arista ≫ 7500r3-24d Version -
   Arista ≫ 7500r3-24p Version -
   Arista ≫ 7500r3-36cq Version -
   Arista ≫ 7500r3k-36cq Version -
   Arista ≫ 7500r3k-48y4d Version -
   Arista ≫ 7504r3 Version -
   Arista ≫ 7508r3 Version -
   Arista ≫ 7512r3 Version -
   Arista ≫ 7800r3-36d Version -
   Arista ≫ 7800r3-36p Version -
   Arista ≫ 7800r3-48cq Version -
   Arista ≫ 7800r3a-36d Version -
   Arista ≫ 7800r3a-36dm Version -
   Arista ≫ 7800r3a-36p Version -
   Arista ≫ 7800r3a-36pm Version -
   Arista ≫ 7800r3ak-36dm Version -
   Arista ≫ 7800r3ak-36pm Version -
   Arista ≫ 7800r3k-36dm Version -
   Arista ≫ 7800r3k-48cq Version -
   Arista ≫ 7800r3k-48cqms Version -
   Arista ≫ 7800r3k-72y7512r3 Version -
   Arista ≫ 7808r3 Version -
   Arista ≫ 7812r3 Version -
   Arista ≫ 7816r3 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.56% 0.423
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
psirt@arista.com 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://www.arista.com/en/support/advisories-notices/security-advisory/18042-security-advisory-0088
Vendor Advisory
Exploit
Mitigation