Lucene search

K
cve[email protected]CVE-2020-24360
HistoryDec 28, 2020 - 7:15 p.m.

CVE-2020-24360

2020-12-2819:15:12
CWE-404
web.nvd.nist.gov
53
cve-2020-24360
arista eos
arp
kernel crash
device reload
nvd
security advisory

6.1 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

7.4 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.4%

An issue with ARP packets in Arista’s EOS affecting the 7800R3, 7500R3, and 7280R3 series of products may result in issues that cause a kernel crash, followed by a device reload. The affected Arista EOS versions are: 4.24.2.4F and below releases in the 4.24.x train; 4.23.4M and below releases in the 4.23.x train; 4.22.6M and below releases in the 4.22.x train.

Affected configurations

NVD
Node
aristaeosRange4.22.0f4.22.6m
OR
aristaeosRange4.23.0f4.23.4m
OR
aristaeosRange4.24.0f4.24.2.4f
AND
arista7280cr2ak-30Match-
OR
arista7280cr2k-60Match-
OR
arista7280cr3-32d4Match-
OR
arista7280cr3-32p4Match-
OR
arista7280cr3-96Match-
OR
arista7280cr3k-32d4Match-
OR
arista7280cr3k-32p4Match-
OR
arista7280cr3k-96Match-
OR
arista7280dr3-24Match-
OR
arista7280dr3k-24Match-
OR
arista7280pr3-24Match-
OR
arista7280pr3k-24Match-
OR
arista7280sr3-48yc8Match-
OR
arista7280sr3k-48yc8Match-
OR
arista7500r3-24dMatch-
OR
arista7500r3-24pMatch-
OR
arista7500r3-36cqMatch-
OR
arista7500r3k-36cqMatch-
OR
arista7504r3Match-
OR
arista7508r3Match-
OR
arista7512r3Match-
OR
arista7800r3-36pMatch-
OR
arista7800r3-48cqMatch-
OR
arista7800r3k-48cqMatch-
OR
arista7804r3Match-
OR
arista7808r3Match-

6.1 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

7.4 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.4%

Related for CVE-2020-24360