6.5
CVE-2024-11185
- EPSS 0.05%
- Published 27.05.2025 22:11:30
- Last modified 28.05.2025 15:01:30
- Source psirt@arista.com
- Teams watchlist Login
- Open Login
On affected platforms running Arista EOS, ingress traffic on Layer 2 ports may, under certain conditions, be improperly forwarded to ports associated with different VLANs, resulting in a breach of VLAN isolation and segmentation boundaries.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users. Login
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorArista Networks
≫
Product
EOS
Default Statusunaffected
Version <=
4.29.10M
Version
4.29.0
Status
affected
Version <=
4.30.9M
Version
4.30.0
Status
affected
Version <=
4.31.6M
Version
4.31.0
Status
affected
Version <=
4.32.3M
Version
4.32.0
Status
affected
Version <=
4.33.1F
Version
4.33.0
Status
affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.05% | 0.154 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| psirt@arista.com | 6.5 | 3.9 | 2.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
|