CVE-2023-24548 - Vulnerability Details

Vendors	Products
Arista	7280cr3-32d4 7280cr3-32p4 7280cr3-36s 7280cr3-96 7280cr3a-24d12 7280cr3a-48d6 7280cr3a-72 7280dr3-24 7280dr3a-36 7280dr3a-54 7280dr3ak-36 7280dr3ak-54 7280dr3am-36 7280dr3am-54 7280pr3-24 7280r3 7280sr3-40yc6 7280sr3-48yc8 7280tr3-40c6 7500r3-24d 7500r3-24p 7500r3-36cq 7500r3k-36cq 7500r3k-48y4d 7504r3 7508r3 7512r3 7800r3-36d 7800r3-36p 7800r3-48cq 7800r3a-36d 7800r3a-36dm 7800r3a-36p 7800r3a-36pm 7800r3ak-36dm 7800r3ak-36pm 7800r3k-36dm 7800r3k-48cq 7800r3k-48cqms 7800r3k-72y7512r3 7808r3 7812r3 7816r3 Eos

Link	Providers
https://www.arista.com/en/support/advisories-notices/security-advisory/18043-security-advisory-0089

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-24548", "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "state": "PUBLISHED", "assignerShortName": "Arista", "dateReserved": "2023-01-26T11:37:43.827Z", "datePublished": "2023-08-29T16:13:10.451Z", "dateUpdated": "2024-09-30T17:46:19.199Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "EOS", "vendor": "Arista Networks", "versions": [{"lessThanOrEqual": "=4.25.0F", "status": "affected", "version": "4.25.0F", "versionType": "custom"}, {"lessThanOrEqual": "<=4.24.11M", "status": "affected", "version": "4.24.0", "versionType": "custom"}, {"lessThanOrEqual": "<=4.23.14M", "status": "affected", "version": "4.23.0", "versionType": "custom"}, {"lessThanOrEqual": "<=4.22.13M", "status": "affected", "version": "4.22.1F", "versionType": "custom"}]}], "configurations": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<b><p><span style=\"background-color: transparent;\">In order to be vulnerable to CVE-2023-24548, the following three conditions must be met:</span></p><br><p><span style=\"background-color: transparent;\">IP routing should be enabled:</span></p><br><div><table><tbody><tr><td><p><span style=\"background-color: transparent;\">Switch&gt; show running-config section ip routing</span></p><p><span style=\"background-color: transparent;\">ip routing</span></p></td></tr></tbody></table></div><br><p><span style=\"background-color: transparent;\">AND</span></p><br><p><span style=\"background-color: transparent;\">VXLAN should be configured - a sample configuration is found below:</span></p><br><div><table><tbody><tr><td><p><span style=\"background-color: transparent;\"># Loopback interface configuration</span></p><p><span style=\"background-color: transparent;\">switch&gt; show running-config section loopback</span></p><p><span style=\"background-color: transparent;\">interface Loopback0</span></p><p><span style=\"background-color: transparent;\">&nbsp; &nbsp;ip address 10.0.0.1/32</span></p><br><p><span style=\"background-color: transparent;\"># VXLAN VTEP configuration</span></p><p><span style=\"background-color: transparent;\">switch&gt; show running-config section vxlan</span></p><p><span style=\"background-color: transparent;\">interface Vxlan1</span></p><p><span style=\"background-color: transparent;\">&nbsp; &nbsp;vxlan source-interface Loopback0</span></p><p><span style=\"background-color: transparent;\">&nbsp; &nbsp;vxlan udp-port 4789</span></p><p><span style=\"background-color: transparent;\">&nbsp; &nbsp;vxlan flood vtep 10.0.0.2</span></p></td></tr></tbody></table></div><br><p><span style=\"background-color: transparent;\">AND</span></p><br><p><span style=\"background-color: transparent;\">VXLAN extended VLAN or VNI must be routable - two examples are shown below:</span><span style=\"background-color: transparent;\">&nbsp;</span></p><br><div><table><tbody><tr><td><p><span style=\"background-color: transparent;\"># Overlay interface</span></p><p><span style=\"background-color: transparent;\">switch&gt; show running-config section vlan</span></p><p><span style=\"background-color: transparent;\">vlan 100</span></p><p><span style=\"background-color: transparent;\">interface Ethernet1/1</span></p><p><span style=\"background-color: transparent;\">&nbsp; &nbsp;switchport access vlan 100</span></p><p><span style=\"background-color: transparent;\">interface Vlan100</span></p><p><span style=\"background-color: transparent;\">&nbsp; &nbsp;ip address 1.0.0.1/24</span></p><br><p><span style=\"background-color: transparent;\">Interface Vxlan1</span></p><p><span style=\"background-color: transparent;\">&nbsp; vxlan vlan 100 vni 100000</span></p></td></tr></tbody></table></div><br><div><table><tbody><tr><td><p><span style=\"background-color: transparent;\">switch&gt; show running-config section red</span></p><p><span style=\"background-color: transparent;\">vrf instance red</span></p><p><span style=\"background-color: transparent;\">ip routing vrf red</span></p><br><p><span style=\"background-color: transparent;\">interface Vxlan1</span></p><p><span style=\"background-color: transparent;\">&nbsp; &nbsp;vxlan vrf red vni 200000</span></p></td></tr></tbody></table></div><br><br><p><span style=\"background-color: transparent;\">Whether such a configuration exists can be checked as follows:</span></p><br><div><table><tbody><tr><td><p><span style=\"background-color: transparent;\">switch&gt; show vxlan vni</span></p><p><span style=\"background-color: transparent;\">VNI to VLAN Mapping for Vxlan1</span></p><p><span style=\"background-color: transparent;\">VNI  &nbsp; &nbsp; &nbsp; &nbsp; VLAN &nbsp; &nbsp; &nbsp; Source &nbsp; &nbsp; &nbsp; Interface &nbsp; &nbsp; &nbsp; &nbsp; 802.1Q Tag</span></p><p><span style=\"background-color: transparent;\">------------ ---------- ------------ ----------------- ----------</span></p><p><span style=\"background-color: rgb(255, 255, 0);\">100000</span><span style=\"background-color: transparent;\"> &nbsp; &nbsp; &nbsp; </span><span style=\"background-color: rgb(255, 255, 0);\">100</span><span style=\"background-color: transparent;\">&nbsp; &nbsp; &nbsp; &nbsp; static &nbsp; &nbsp; &nbsp; Ethernet1/1 &nbsp; &nbsp; &nbsp; untagged</span></p><p><span style=\"background-color: transparent;\">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Vxlan1  &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 100</span></p><br><p><span style=\"background-color: transparent;\">VNI to dynamic VLAN Mapping for Vxlan1</span></p><p><span style=\"background-color: transparent;\">VNI  &nbsp; &nbsp; &nbsp; &nbsp; VLAN &nbsp; &nbsp; &nbsp; VRF &nbsp; &nbsp; &nbsp; Source</span></p><p><span style=\"background-color: transparent;\">------------ ---------- --------- ------------</span></p><p><span style=\"background-color: rgb(255, 255, 0);\">200000</span><span style=\"background-color: transparent;\"> &nbsp; &nbsp; &nbsp; </span><span style=\"background-color: rgb(255, 255, 0);\">1006</span><span style=\"background-color: transparent;\"> &nbsp; &nbsp; &nbsp; red &nbsp; &nbsp; &nbsp; evpn</span></p><br><br><p><span style=\"background-color: transparent;\">switch&gt; show vlan</span></p><p><span style=\"background-color: transparent;\">VLAN  Name &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Status  &nbsp; Ports</span></p><p><span style=\"background-color: transparent;\">----- -------------------------------- --------- -------------------------------</span></p><p><span style=\"background-color: rgb(255, 255, 0);\">100</span><span style=\"background-color: transparent;\"> &nbsp; VLAN0100 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; active  &nbsp; Cpu, </span><span style=\"background-color: rgb(255, 255, 0);\">Vx1</span></p><p><span style=\"background-color: rgb(255, 255, 0);\">1006</span><span style=\"background-color: transparent;\">* VLAN1006 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; active  &nbsp; Cpu, </span><span style=\"background-color: rgb(255, 255, 0);\">Vx1</span></p><br><br><p><span style=\"background-color: transparent;\">switch&gt; show ip interface brief</span></p><p><span style=\"background-color: transparent;\">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Address</span></p><p><span style=\"background-color: transparent;\">Interface &nbsp; &nbsp; &nbsp; &nbsp; IP Address  &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Status &nbsp; &nbsp; &nbsp; Protocol  &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; MTU  &nbsp; Owner</span></p><p><span style=\"background-color: transparent;\">----------------- --------------------- ------------ -------------- ----------- -------</span></p><p><span style=\"background-color: rgb(255, 255, 0);\">Vlan100</span><span style=\"background-color: transparent;\"> &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1.0.0.1/24  &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; </span><span style=\"background-color: rgb(255, 255, 0);\">up</span><span style=\"background-color: transparent;\"> &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; up &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1500</span></p><p><span style=\"background-color: rgb(255, 255, 0);\">Vlan1006</span><span style=\"background-color: transparent;\">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; unassigned  &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; </span><span style=\"background-color: rgb(255, 255, 0);\">up</span><span style=\"background-color: transparent;\"> &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; up  &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 10168</span></p></td></tr></tbody></table></div><br><p><span style=\"background-color: transparent;\">From the above outputs, it can be seen that IP routing is enabled, VXLAN is configured, and VNIs 100000 (mapped to VLAN 100) and 200000 (mapped to VRF red) are routable.</span></p></b><br><br>"}], "value": "In order to be vulnerable to CVE-2023-24548, the following three conditions must be met:\n\n\nIP routing should be enabled:\n\n\nSwitch> show running-config section ip routing\n\nip routing\n\n\n\n\nAND\n\n\nVXLAN should be configured - a sample configuration is found below:\n\n\n# Loopback interface configuration\n\nswitch> show running-config section loopback\n\ninterface Loopback0\n\n\u00a0 \u00a0ip address 10.0.0.1/32\n\n\n# VXLAN VTEP configuration\n\nswitch> show running-config section vxlan\n\ninterface Vxlan1\n\n\u00a0 \u00a0vxlan source-interface Loopback0\n\n\u00a0 \u00a0vxlan udp-port 4789\n\n\u00a0 \u00a0vxlan flood vtep 10.0.0.2\n\n\n\n\nAND\n\n\nVXLAN extended VLAN or VNI must be routable - two examples are shown below:\u00a0\n\n\n# Overlay interface\n\nswitch> show running-config section vlan\n\nvlan 100\n\ninterface Ethernet1/1\n\n\u00a0 \u00a0switchport access vlan 100\n\ninterface Vlan100\n\n\u00a0 \u00a0ip address 1.0.0.1/24\n\n\nInterface Vxlan1\n\n\u00a0 vxlan vlan 100 vni 100000\n\n\n\n\nswitch> show running-config section red\n\nvrf instance red\n\nip routing vrf red\n\n\ninterface Vxlan1\n\n\u00a0 \u00a0vxlan vrf red vni 200000\n\n\n\n\n\nWhether such a configuration exists can be checked as follows:\n\n\nswitch> show vxlan vni\n\nVNI to VLAN Mapping for Vxlan1\n\nVNI  \u00a0 \u00a0 \u00a0 \u00a0 VLAN \u00a0 \u00a0 \u00a0 Source \u00a0 \u00a0 \u00a0 Interface \u00a0 \u00a0 \u00a0 \u00a0 802.1Q Tag\n\n------------ ---------- ------------ ----------------- ----------\n\n100000 \u00a0 \u00a0 \u00a0 100\u00a0 \u00a0 \u00a0 \u00a0 static \u00a0 \u00a0 \u00a0 Ethernet1/1 \u00a0 \u00a0 \u00a0 untagged\n\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0Vxlan1  \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 100\n\n\nVNI to dynamic VLAN Mapping for Vxlan1\n\nVNI  \u00a0 \u00a0 \u00a0 \u00a0 VLAN \u00a0 \u00a0 \u00a0 VRF \u00a0 \u00a0 \u00a0 Source\n\n------------ ---------- --------- ------------\n\n200000 \u00a0 \u00a0 \u00a0 1006 \u00a0 \u00a0 \u00a0 red \u00a0 \u00a0 \u00a0 evpn\n\n\n\nswitch> show vlan\n\nVLAN  Name \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Status  \u00a0 Ports\n\n----- -------------------------------- --------- -------------------------------\n\n100 \u00a0 VLAN0100 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 active  \u00a0 Cpu, Vx1\n\n1006* VLAN1006 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 active  \u00a0 Cpu, Vx1\n\n\n\nswitch> show ip interface brief\n\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0Address\n\nInterface \u00a0 \u00a0 \u00a0 \u00a0 IP Address  \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Status \u00a0 \u00a0 \u00a0 Protocol  \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 MTU  \u00a0 Owner\n\n----------------- --------------------- ------------ -------------- ----------- -------\n\nVlan100 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 1.0.0.1/24  \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 up \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 up \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 1500\n\nVlan1006\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 unassigned  \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 up \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 up  \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 10168\n\n\n\n\nFrom the above outputs, it can be seen that IP routing is enabled, VXLAN is configured, and VNIs 100000 (mapped to VLAN 100) and 200000 (mapped to VRF red) are routable.\n\n\n\n"}], "datePublic": "2023-08-23T15:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<b><span style=\"background-color: transparent;\">On</span> <span style=\"background-color: transparent;\">affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets. The device will continue to be susceptible to the issue until remediation is in place.</span></b><br>"}], "value": "On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets. The device will continue to be susceptible to the issue until remediation is in place.\n"}], "impacts": [{"capecId": "CAPEC-583", "descriptions": [{"lang": "en", "value": "CAPEC-583 Disabling Network Hardware"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-120", "description": "CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista", "dateUpdated": "2023-08-29T16:13:10.451Z"}, "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/18043-security-advisory-0089"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<b><p><span style=\"background-color: transparent;\">The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Arista recommends customers move to the latest version of each release that contains all the fixes listed below. For more information about upgrading see </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://www.arista.com/en/um-eos/eos-upgrades-and-downgrades\"><span style=\"background-color: transparent;\">EOS User Manual: Upgrades and Downgrades</span></a></p><br><p><span style=\"background-color: transparent;\">CVE-2023-24548 has been fixed in the following releases:</span></p><ul><li><p><span style=\"background-color: transparent;\">4.30.0F and later releases in the 4.30.x train</span></p></li><li><p><span style=\"background-color: transparent;\">4.29.0F and later releases in the 4.29.x train</span></p></li><li><p><span style=\"background-color: transparent;\">4.28.0F and later releases in the 4.28.x train</span></p></li><li><p><span style=\"background-color: transparent;\">4.27.0F and later releases in the 4.27.x train</span></p></li><li><p><span style=\"background-color: transparent;\">4.26.0F and later releases in the 4.26.x train</span></p></li><li><p><span style=\"background-color: transparent;\">4.25.1F and later releases in the 4.25.x train</span></p></li></ul><span style=\"background-color: transparent;\">No remediation is planned for EOS software versions that are beyond their </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://www.arista.com/en/support/product-documentation/eos-life-cycle-policy\"><span style=\"background-color: transparent;\">standard EOS support lifecycle</span></a><span style=\"background-color: transparent;\"> (i.e. 4.22, 4.23).</span></b><br>"}], "value": "The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Arista recommends customers move to the latest version of each release that contains all the fixes listed below. For more information about upgrading see  EOS User Manual: Upgrades and Downgrades https://www.arista.com/en/um-eos/eos-upgrades-and-downgrades \n\n\nCVE-2023-24548 has been fixed in the following releases:\n\n  *  4.30.0F and later releases in the 4.30.x train\n\n\n  *  4.29.0F and later releases in the 4.29.x train\n\n\n  *  4.28.0F and later releases in the 4.28.x train\n\n\n  *  4.27.0F and later releases in the 4.27.x train\n\n\n  *  4.26.0F and later releases in the 4.26.x train\n\n\n  *  4.25.1F and later releases in the 4.25.x train\n\n\n\n\nNo remediation is planned for EOS software versions that are beyond their  standard EOS support lifecycle https://www.arista.com/en/support/product-documentation/eos-life-cycle-policy  (i.e. 4.22, 4.23).\n"}], "source": {"advisory": "Security Advisory 89", "defect": ["828687"], "discovery": "INTERNAL"}, "title": "On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<b><span style=\"background-color: transparent;\">There is no known mitigation for the issue. The recommended resolution is to upgrade to a remediated software version at your earliest convenience.</span></b><br>"}], "value": "There is no known mitigation for the issue. The recommended resolution is to upgrade to a remediated software version at your earliest convenience.\n"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T11:03:18.834Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/18043-security-advisory-0089", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-09-30T17:34:44.954023Z", "id": "CVE-2023-24548", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-30T17:46:19.199Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-24548 (string)

assignerOrgId : c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7 (string)

state : PUBLISHED (string)

assignerShortName : Arista (string)

dateReserved : 2023-01-26T11:37:43.827Z (string)

datePublished : 2023-08-29T16:13:10.451Z (string)

dateUpdated : 2024-09-30T17:46:19.199Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : EOS (string)

vendor : Arista Networks (string)

versions : [ »

0 : { »

lessThanOrEqual : =4.25.0F (string)

status : affected (string)

version : 4.25.0F (string)

versionType : custom (string)

}

1 : { »

lessThanOrEqual : <=4.24.11M (string)

status : affected (string)

version : 4.24.0 (string)

versionType : custom (string)

}

2 : { »

lessThanOrEqual : <=4.23.14M (string)

status : affected (string)

version : 4.23.0 (string)

versionType : custom (string)

}

3 : { »

lessThanOrEqual : <=4.22.13M (string)

status : affected (string)

version : 4.22.1F (string)

versionType : custom (string)

}

]

}

]

configurations : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : In order to be vulnerable to CVE-2023-24548, the following three conditions must be met: IP routing should be enabled: <div><table><tbody><tr><td>Switch> show running-config section ip routingip routing</td></tr></tbody></table></div> AND VXLAN should be configured - a sample configuration is found below: <div><table><tbody><tr><td># Loopback interface configurationswitch> show running-config section loopbackinterface Loopback0   ip address 10.0.0.1/32 # VXLAN VTEP configurationswitch> show running-config section vxlaninterface Vxlan1   vxlan source-interface Loopback0   vxlan udp-port 4789   vxlan flood vtep 10.0.0.2</td></tr></tbody></table></div> AND VXLAN extended VLAN or VNI must be routable - two examples are shown below:  <div><table><tbody><tr><td># Overlay interfaceswitch> show running-config section vlanvlan 100interface Ethernet1/1   switchport access vlan 100interface Vlan100   ip address 1.0.0.1/24 Interface Vxlan1  vxlan vlan 100 vni 100000</td></tr></tbody></table></div> <div><table><tbody><tr><td>switch> show running-config section redvrf instance redip routing vrf red interface Vxlan1   vxlan vrf red vni 200000</td></tr></tbody></table></div> Whether such a configuration exists can be checked as follows: <div><table><tbody><tr><td>switch> show vxlan vniVNI to VLAN Mapping for Vxlan1VNI         VLAN       Source       Interface         802.1Q Tag------------ ---------- ------------ ----------------- ----------100000       100        static       Ethernet1/1       untagged                                     Vxlan1           100 VNI to dynamic VLAN Mapping for Vxlan1VNI         VLAN       VRF       Source------------ ---------- --------- ------------200000       1006       red       evpn switch> show vlanVLAN Name                             Status   Ports----- -------------------------------- --------- -------------------------------100   VLAN0100                         active   Cpu, Vx11006* VLAN1006                         active   Cpu, Vx1 switch> show ip interface brief                                                                               AddressInterface         IP Address           Status       Protocol           MTU   Owner----------------- --------------------- ------------ -------------- ----------- -------Vlan100           1.0.0.1/24           up           up                 1500Vlan1006          unassigned           up           up               10168</td></tr></tbody></table></div> From the above outputs, it can be seen that IP routing is enabled, VXLAN is configured, and VNIs 100000 (mapped to VLAN 100) and 200000 (mapped to VRF red) are routable. (string)

}

]

value : In order to be vulnerable to CVE-2023-24548, the following three conditions must be met: IP routing should be enabled: Switch> show running-config section ip routing ip routing AND VXLAN should be configured - a sample configuration is found below: # Loopback interface configuration switch> show running-config section loopback interface Loopback0 ip address 10.0.0.1/32 # VXLAN VTEP configuration switch> show running-config section vxlan interface Vxlan1 vxlan source-interface Loopback0 vxlan udp-port 4789 vxlan flood vtep 10.0.0.2 AND VXLAN extended VLAN or VNI must be routable - two examples are shown below: # Overlay interface switch> show running-config section vlan vlan 100 interface Ethernet1/1 switchport access vlan 100 interface Vlan100 ip address 1.0.0.1/24 Interface Vxlan1 vxlan vlan 100 vni 100000 switch> show running-config section red vrf instance red ip routing vrf red interface Vxlan1 vxlan vrf red vni 200000 Whether such a configuration exists can be checked as follows: switch> show vxlan vni VNI to VLAN Mapping for Vxlan1 VNI VLAN Source Interface 802.1Q Tag ------------ ---------- ------------ ----------------- ---------- 100000 100 static Ethernet1/1 untagged Vxlan1 100 VNI to dynamic VLAN Mapping for Vxlan1 VNI VLAN VRF Source ------------ ---------- --------- ------------ 200000 1006 red evpn switch> show vlan VLAN Name Status Ports ----- -------------------------------- --------- ------------------------------- 100 VLAN0100 active Cpu, Vx1 1006* VLAN1006 active Cpu, Vx1 switch> show ip interface brief Address Interface IP Address Status Protocol MTU Owner ----------------- --------------------- ------------ -------------- ----------- ------- Vlan100 1.0.0.1/24 up up 1500 Vlan1006 unassigned up up 10168 From the above outputs, it can be seen that IP routing is enabled, VXLAN is configured, and VNIs 100000 (mapped to VLAN 100) and 200000 (mapped to VRF red) are routable. (string)

}

]

datePublic : 2023-08-23T15:00:00.000Z (string)

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets. The device will continue to be susceptible to the issue until remediation is in place. (string)

}

]

value : On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets. The device will continue to be susceptible to the issue until remediation is in place. (string)

}

]

impacts : [ »

0 : { »

capecId : CAPEC-583 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : CAPEC-583 Disabling Network Hardware (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : HIGH (string)

attackVector : ADJACENT_NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 5.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-120 (string)

description : CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7 (string)

shortName : Arista (string)

dateUpdated : 2023-08-29T16:13:10.451Z (string)

}

references : [ »

0 : { »

url : https://www.arista.com/en/support/advisories-notices/security-advisory/18043-security-advisory-0089 (string)

}

]

solutions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Arista recommends customers move to the latest version of each release that contains all the fixes listed below. For more information about upgrading see <a target="_blank" rel="nofollow" href="https://www.arista.com/en/um-eos/eos-upgrades-and-downgrades">EOS User Manual: Upgrades and Downgrades</a> CVE-2023-24548 has been fixed in the following releases:<ul><li>4.30.0F and later releases in the 4.30.x train</li><li>4.29.0F and later releases in the 4.29.x train</li><li>4.28.0F and later releases in the 4.28.x train</li><li>4.27.0F and later releases in the 4.27.x train</li><li>4.26.0F and later releases in the 4.26.x train</li><li>4.25.1F and later releases in the 4.25.x train</li></ul>No remediation is planned for EOS software versions that are beyond their <a target="_blank" rel="nofollow" href="https://www.arista.com/en/support/product-documentation/eos-life-cycle-policy">standard EOS support lifecycle</a> (i.e. 4.22, 4.23). (string)

}

]

value : The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Arista recommends customers move to the latest version of each release that contains all the fixes listed below. For more information about upgrading see EOS User Manual: Upgrades and Downgrades https://www.arista.com/en/um-eos/eos-upgrades-and-downgrades CVE-2023-24548 has been fixed in the following releases: * 4.30.0F and later releases in the 4.30.x train * 4.29.0F and later releases in the 4.29.x train * 4.28.0F and later releases in the 4.28.x train * 4.27.0F and later releases in the 4.27.x train * 4.26.0F and later releases in the 4.26.x train * 4.25.1F and later releases in the 4.25.x train No remediation is planned for EOS software versions that are beyond their standard EOS support lifecycle https://www.arista.com/en/support/product-documentation/eos-life-cycle-policy (i.e. 4.22, 4.23). (string)

}

]

source : { »

advisory : Security Advisory 89 (string)

defect : [ »

0 : 828687 (string)

]

discovery : INTERNAL (string)

}

title : On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets (string)

workarounds : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : There is no known mitigation for the issue. The recommended resolution is to upgrade to a remediated software version at your earliest convenience. (string)

}

]

value : There is no known mitigation for the issue. The recommended resolution is to upgrade to a remediated software version at your earliest convenience. (string)

}

]

x_generator : { »

engine : Vulnogram 0.1.0-dev (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T11:03:18.834Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://www.arista.com/en/support/advisories-notices/security-advisory/18043-security-advisory-0089 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-09-30T17:34:44.954023Z (string)

id : CVE-2023-24548 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-09-30T17:46:19.199Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-24548", "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "state": "PUBLISHED", "assignerShortName": "Arista", "dateReserved": "2023-01-26T11:37:43.827Z", "datePublished": "2023-08-29T16:13:10.451Z", "dateUpdated": "2024-09-30T17:46:19.199Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "EOS", "vendor": "Arista Networks", "versions": [{"lessThanOrEqual": "=4.25.0F", "status": "affected", "version": "4.25.0F", "versionType": "custom"}, {"lessThanOrEqual": "<=4.24.11M", "status": "affected", "version": "4.24.0", "versionType": "custom"}, {"lessThanOrEqual": "<=4.23.14M", "status": "affected", "version": "4.23.0", "versionType": "custom"}, {"lessThanOrEqual": "<=4.22.13M", "status": "affected", "version": "4.22.1F", "versionType": "custom"}]}], "configurations": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<b><p><span style=\"background-color: transparent;\">In order to be vulnerable to CVE-2023-24548, the following three conditions must be met:</span></p><br><p><span style=\"background-color: transparent;\">IP routing should be enabled:</span></p><br><div><table><tbody><tr><td><p><span style=\"background-color: transparent;\">Switch&gt; show running-config section ip routing</span></p><p><span style=\"background-color: transparent;\">ip routing</span></p></td></tr></tbody></table></div><br><p><span style=\"background-color: transparent;\">AND</span></p><br><p><span style=\"background-color: transparent;\">VXLAN should be configured - a sample configuration is found below:</span></p><br><div><table><tbody><tr><td><p><span style=\"background-color: transparent;\"># Loopback interface configuration</span></p><p><span style=\"background-color: transparent;\">switch&gt; show running-config section loopback</span></p><p><span style=\"background-color: transparent;\">interface Loopback0</span></p><p><span style=\"background-color: transparent;\">&nbsp; &nbsp;ip address 10.0.0.1/32</span></p><br><p><span style=\"background-color: transparent;\"># VXLAN VTEP configuration</span></p><p><span style=\"background-color: transparent;\">switch&gt; show running-config section vxlan</span></p><p><span style=\"background-color: transparent;\">interface Vxlan1</span></p><p><span style=\"background-color: transparent;\">&nbsp; &nbsp;vxlan source-interface Loopback0</span></p><p><span style=\"background-color: transparent;\">&nbsp; &nbsp;vxlan udp-port 4789</span></p><p><span style=\"background-color: transparent;\">&nbsp; &nbsp;vxlan flood vtep 10.0.0.2</span></p></td></tr></tbody></table></div><br><p><span style=\"background-color: transparent;\">AND</span></p><br><p><span style=\"background-color: transparent;\">VXLAN extended VLAN or VNI must be routable - two examples are shown below:</span><span style=\"background-color: transparent;\">&nbsp;</span></p><br><div><table><tbody><tr><td><p><span style=\"background-color: transparent;\"># Overlay interface</span></p><p><span style=\"background-color: transparent;\">switch&gt; show running-config section vlan</span></p><p><span style=\"background-color: transparent;\">vlan 100</span></p><p><span style=\"background-color: transparent;\">interface Ethernet1/1</span></p><p><span style=\"background-color: transparent;\">&nbsp; &nbsp;switchport access vlan 100</span></p><p><span style=\"background-color: transparent;\">interface Vlan100</span></p><p><span style=\"background-color: transparent;\">&nbsp; &nbsp;ip address 1.0.0.1/24</span></p><br><p><span style=\"background-color: transparent;\">Interface Vxlan1</span></p><p><span style=\"background-color: transparent;\">&nbsp; vxlan vlan 100 vni 100000</span></p></td></tr></tbody></table></div><br><div><table><tbody><tr><td><p><span style=\"background-color: transparent;\">switch&gt; show running-config section red</span></p><p><span style=\"background-color: transparent;\">vrf instance red</span></p><p><span style=\"background-color: transparent;\">ip routing vrf red</span></p><br><p><span style=\"background-color: transparent;\">interface Vxlan1</span></p><p><span style=\"background-color: transparent;\">&nbsp; &nbsp;vxlan vrf red vni 200000</span></p></td></tr></tbody></table></div><br><br><p><span style=\"background-color: transparent;\">Whether such a configuration exists can be checked as follows:</span></p><br><div><table><tbody><tr><td><p><span style=\"background-color: transparent;\">switch&gt; show vxlan vni</span></p><p><span style=\"background-color: transparent;\">VNI to VLAN Mapping for Vxlan1</span></p><p><span style=\"background-color: transparent;\">VNI  &nbsp; &nbsp; &nbsp; &nbsp; VLAN &nbsp; &nbsp; &nbsp; Source &nbsp; &nbsp; &nbsp; Interface &nbsp; &nbsp; &nbsp; &nbsp; 802.1Q Tag</span></p><p><span style=\"background-color: transparent;\">------------ ---------- ------------ ----------------- ----------</span></p><p><span style=\"background-color: rgb(255, 255, 0);\">100000</span><span style=\"background-color: transparent;\"> &nbsp; &nbsp; &nbsp; </span><span style=\"background-color: rgb(255, 255, 0);\">100</span><span style=\"background-color: transparent;\">&nbsp; &nbsp; &nbsp; &nbsp; static &nbsp; &nbsp; &nbsp; Ethernet1/1 &nbsp; &nbsp; &nbsp; untagged</span></p><p><span style=\"background-color: transparent;\">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Vxlan1  &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 100</span></p><br><p><span style=\"background-color: transparent;\">VNI to dynamic VLAN Mapping for Vxlan1</span></p><p><span style=\"background-color: transparent;\">VNI  &nbsp; &nbsp; &nbsp; &nbsp; VLAN &nbsp; &nbsp; &nbsp; VRF &nbsp; &nbsp; &nbsp; Source</span></p><p><span style=\"background-color: transparent;\">------------ ---------- --------- ------------</span></p><p><span style=\"background-color: rgb(255, 255, 0);\">200000</span><span style=\"background-color: transparent;\"> &nbsp; &nbsp; &nbsp; </span><span style=\"background-color: rgb(255, 255, 0);\">1006</span><span style=\"background-color: transparent;\"> &nbsp; &nbsp; &nbsp; red &nbsp; &nbsp; &nbsp; evpn</span></p><br><br><p><span style=\"background-color: transparent;\">switch&gt; show vlan</span></p><p><span style=\"background-color: transparent;\">VLAN  Name &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Status  &nbsp; Ports</span></p><p><span style=\"background-color: transparent;\">----- -------------------------------- --------- -------------------------------</span></p><p><span style=\"background-color: rgb(255, 255, 0);\">100</span><span style=\"background-color: transparent;\"> &nbsp; VLAN0100 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; active  &nbsp; Cpu, </span><span style=\"background-color: rgb(255, 255, 0);\">Vx1</span></p><p><span style=\"background-color: rgb(255, 255, 0);\">1006</span><span style=\"background-color: transparent;\">* VLAN1006 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; active  &nbsp; Cpu, </span><span style=\"background-color: rgb(255, 255, 0);\">Vx1</span></p><br><br><p><span style=\"background-color: transparent;\">switch&gt; show ip interface brief</span></p><p><span style=\"background-color: transparent;\">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Address</span></p><p><span style=\"background-color: transparent;\">Interface &nbsp; &nbsp; &nbsp; &nbsp; IP Address  &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Status &nbsp; &nbsp; &nbsp; Protocol  &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; MTU  &nbsp; Owner</span></p><p><span style=\"background-color: transparent;\">----------------- --------------------- ------------ -------------- ----------- -------</span></p><p><span style=\"background-color: rgb(255, 255, 0);\">Vlan100</span><span style=\"background-color: transparent;\"> &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1.0.0.1/24  &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; </span><span style=\"background-color: rgb(255, 255, 0);\">up</span><span style=\"background-color: transparent;\"> &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; up &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1500</span></p><p><span style=\"background-color: rgb(255, 255, 0);\">Vlan1006</span><span style=\"background-color: transparent;\">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; unassigned  &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; </span><span style=\"background-color: rgb(255, 255, 0);\">up</span><span style=\"background-color: transparent;\"> &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; up  &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 10168</span></p></td></tr></tbody></table></div><br><p><span style=\"background-color: transparent;\">From the above outputs, it can be seen that IP routing is enabled, VXLAN is configured, and VNIs 100000 (mapped to VLAN 100) and 200000 (mapped to VRF red) are routable.</span></p></b><br><br>"}], "value": "In order to be vulnerable to CVE-2023-24548, the following three conditions must be met:\n\n\nIP routing should be enabled:\n\n\nSwitch> show running-config section ip routing\n\nip routing\n\n\n\n\nAND\n\n\nVXLAN should be configured - a sample configuration is found below:\n\n\n# Loopback interface configuration\n\nswitch> show running-config section loopback\n\ninterface Loopback0\n\n\u00a0 \u00a0ip address 10.0.0.1/32\n\n\n# VXLAN VTEP configuration\n\nswitch> show running-config section vxlan\n\ninterface Vxlan1\n\n\u00a0 \u00a0vxlan source-interface Loopback0\n\n\u00a0 \u00a0vxlan udp-port 4789\n\n\u00a0 \u00a0vxlan flood vtep 10.0.0.2\n\n\n\n\nAND\n\n\nVXLAN extended VLAN or VNI must be routable - two examples are shown below:\u00a0\n\n\n# Overlay interface\n\nswitch> show running-config section vlan\n\nvlan 100\n\ninterface Ethernet1/1\n\n\u00a0 \u00a0switchport access vlan 100\n\ninterface Vlan100\n\n\u00a0 \u00a0ip address 1.0.0.1/24\n\n\nInterface Vxlan1\n\n\u00a0 vxlan vlan 100 vni 100000\n\n\n\n\nswitch> show running-config section red\n\nvrf instance red\n\nip routing vrf red\n\n\ninterface Vxlan1\n\n\u00a0 \u00a0vxlan vrf red vni 200000\n\n\n\n\n\nWhether such a configuration exists can be checked as follows:\n\n\nswitch> show vxlan vni\n\nVNI to VLAN Mapping for Vxlan1\n\nVNI  \u00a0 \u00a0 \u00a0 \u00a0 VLAN \u00a0 \u00a0 \u00a0 Source \u00a0 \u00a0 \u00a0 Interface \u00a0 \u00a0 \u00a0 \u00a0 802.1Q Tag\n\n------------ ---------- ------------ ----------------- ----------\n\n100000 \u00a0 \u00a0 \u00a0 100\u00a0 \u00a0 \u00a0 \u00a0 static \u00a0 \u00a0 \u00a0 Ethernet1/1 \u00a0 \u00a0 \u00a0 untagged\n\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0Vxlan1  \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 100\n\n\nVNI to dynamic VLAN Mapping for Vxlan1\n\nVNI  \u00a0 \u00a0 \u00a0 \u00a0 VLAN \u00a0 \u00a0 \u00a0 VRF \u00a0 \u00a0 \u00a0 Source\n\n------------ ---------- --------- ------------\n\n200000 \u00a0 \u00a0 \u00a0 1006 \u00a0 \u00a0 \u00a0 red \u00a0 \u00a0 \u00a0 evpn\n\n\n\nswitch> show vlan\n\nVLAN  Name \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Status  \u00a0 Ports\n\n----- -------------------------------- --------- -------------------------------\n\n100 \u00a0 VLAN0100 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 active  \u00a0 Cpu, Vx1\n\n1006* VLAN1006 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 active  \u00a0 Cpu, Vx1\n\n\n\nswitch> show ip interface brief\n\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0Address\n\nInterface \u00a0 \u00a0 \u00a0 \u00a0 IP Address  \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Status \u00a0 \u00a0 \u00a0 Protocol  \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 MTU  \u00a0 Owner\n\n----------------- --------------------- ------------ -------------- ----------- -------\n\nVlan100 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 1.0.0.1/24  \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 up \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 up \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 1500\n\nVlan1006\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 unassigned  \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 up \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 up  \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 10168\n\n\n\n\nFrom the above outputs, it can be seen that IP routing is enabled, VXLAN is configured, and VNIs 100000 (mapped to VLAN 100) and 200000 (mapped to VRF red) are routable.\n\n\n\n"}], "datePublic": "2023-08-23T15:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<b><span style=\"background-color: transparent;\">On</span> <span style=\"background-color: transparent;\">affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets. The device will continue to be susceptible to the issue until remediation is in place.</span></b><br>"}], "value": "On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets. The device will continue to be susceptible to the issue until remediation is in place.\n"}], "impacts": [{"capecId": "CAPEC-583", "descriptions": [{"lang": "en", "value": "CAPEC-583 Disabling Network Hardware"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-120", "description": "CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista", "dateUpdated": "2023-08-29T16:13:10.451Z"}, "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/18043-security-advisory-0089"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<b><p><span style=\"background-color: transparent;\">The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Arista recommends customers move to the latest version of each release that contains all the fixes listed below. For more information about upgrading see </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://www.arista.com/en/um-eos/eos-upgrades-and-downgrades\"><span style=\"background-color: transparent;\">EOS User Manual: Upgrades and Downgrades</span></a></p><br><p><span style=\"background-color: transparent;\">CVE-2023-24548 has been fixed in the following releases:</span></p><ul><li><p><span style=\"background-color: transparent;\">4.30.0F and later releases in the 4.30.x train</span></p></li><li><p><span style=\"background-color: transparent;\">4.29.0F and later releases in the 4.29.x train</span></p></li><li><p><span style=\"background-color: transparent;\">4.28.0F and later releases in the 4.28.x train</span></p></li><li><p><span style=\"background-color: transparent;\">4.27.0F and later releases in the 4.27.x train</span></p></li><li><p><span style=\"background-color: transparent;\">4.26.0F and later releases in the 4.26.x train</span></p></li><li><p><span style=\"background-color: transparent;\">4.25.1F and later releases in the 4.25.x train</span></p></li></ul><span style=\"background-color: transparent;\">No remediation is planned for EOS software versions that are beyond their </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://www.arista.com/en/support/product-documentation/eos-life-cycle-policy\"><span style=\"background-color: transparent;\">standard EOS support lifecycle</span></a><span style=\"background-color: transparent;\"> (i.e. 4.22, 4.23).</span></b><br>"}], "value": "The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Arista recommends customers move to the latest version of each release that contains all the fixes listed below. For more information about upgrading see  EOS User Manual: Upgrades and Downgrades https://www.arista.com/en/um-eos/eos-upgrades-and-downgrades \n\n\nCVE-2023-24548 has been fixed in the following releases:\n\n  *  4.30.0F and later releases in the 4.30.x train\n\n\n  *  4.29.0F and later releases in the 4.29.x train\n\n\n  *  4.28.0F and later releases in the 4.28.x train\n\n\n  *  4.27.0F and later releases in the 4.27.x train\n\n\n  *  4.26.0F and later releases in the 4.26.x train\n\n\n  *  4.25.1F and later releases in the 4.25.x train\n\n\n\n\nNo remediation is planned for EOS software versions that are beyond their  standard EOS support lifecycle https://www.arista.com/en/support/product-documentation/eos-life-cycle-policy  (i.e. 4.22, 4.23).\n"}], "source": {"advisory": "Security Advisory 89", "defect": ["828687"], "discovery": "INTERNAL"}, "title": "On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<b><span style=\"background-color: transparent;\">There is no known mitigation for the issue. The recommended resolution is to upgrade to a remediated software version at your earliest convenience.</span></b><br>"}], "value": "There is no known mitigation for the issue. The recommended resolution is to upgrade to a remediated software version at your earliest convenience.\n"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T11:03:18.834Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/18043-security-advisory-0089", "tags": ["x_transferred"]}]}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-24548", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-30T17:34:44.954023Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-30T17:46:14.286Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-24548 (string)

assignerOrgId : c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7 (string)

state : PUBLISHED (string)

assignerShortName : Arista (string)

dateReserved : 2023-01-26T11:37:43.827Z (string)

datePublished : 2023-08-29T16:13:10.451Z (string)

dateUpdated : 2024-09-30T17:46:19.199Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : EOS (string)

vendor : Arista Networks (string)

versions : [ »

0 : { »

lessThanOrEqual : =4.25.0F (string)

status : affected (string)

version : 4.25.0F (string)

versionType : custom (string)

}

1 : { »

lessThanOrEqual : <=4.24.11M (string)

status : affected (string)

version : 4.24.0 (string)

versionType : custom (string)

}

2 : { »

lessThanOrEqual : <=4.23.14M (string)

status : affected (string)

version : 4.23.0 (string)

versionType : custom (string)

}

3 : { »

lessThanOrEqual : <=4.22.13M (string)

status : affected (string)

version : 4.22.1F (string)

versionType : custom (string)

}

]

}

]

configurations : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : In order to be vulnerable to CVE-2023-24548, the following three conditions must be met: IP routing should be enabled: <div><table><tbody><tr><td>Switch> show running-config section ip routingip routing</td></tr></tbody></table></div> AND VXLAN should be configured - a sample configuration is found below: <div><table><tbody><tr><td># Loopback interface configurationswitch> show running-config section loopbackinterface Loopback0   ip address 10.0.0.1/32 # VXLAN VTEP configurationswitch> show running-config section vxlaninterface Vxlan1   vxlan source-interface Loopback0   vxlan udp-port 4789   vxlan flood vtep 10.0.0.2</td></tr></tbody></table></div> AND VXLAN extended VLAN or VNI must be routable - two examples are shown below:  <div><table><tbody><tr><td># Overlay interfaceswitch> show running-config section vlanvlan 100interface Ethernet1/1   switchport access vlan 100interface Vlan100   ip address 1.0.0.1/24 Interface Vxlan1  vxlan vlan 100 vni 100000</td></tr></tbody></table></div> <div><table><tbody><tr><td>switch> show running-config section redvrf instance redip routing vrf red interface Vxlan1   vxlan vrf red vni 200000</td></tr></tbody></table></div> Whether such a configuration exists can be checked as follows: <div><table><tbody><tr><td>switch> show vxlan vniVNI to VLAN Mapping for Vxlan1VNI         VLAN       Source       Interface         802.1Q Tag------------ ---------- ------------ ----------------- ----------100000       100        static       Ethernet1/1       untagged                                     Vxlan1           100 VNI to dynamic VLAN Mapping for Vxlan1VNI         VLAN       VRF       Source------------ ---------- --------- ------------200000       1006       red       evpn switch> show vlanVLAN Name                             Status   Ports----- -------------------------------- --------- -------------------------------100   VLAN0100                         active   Cpu, Vx11006* VLAN1006                         active   Cpu, Vx1 switch> show ip interface brief                                                                               AddressInterface         IP Address           Status       Protocol           MTU   Owner----------------- --------------------- ------------ -------------- ----------- -------Vlan100           1.0.0.1/24           up           up                 1500Vlan1006          unassigned           up           up               10168</td></tr></tbody></table></div> From the above outputs, it can be seen that IP routing is enabled, VXLAN is configured, and VNIs 100000 (mapped to VLAN 100) and 200000 (mapped to VRF red) are routable. (string)

}

]

value : In order to be vulnerable to CVE-2023-24548, the following three conditions must be met: IP routing should be enabled: Switch> show running-config section ip routing ip routing AND VXLAN should be configured - a sample configuration is found below: # Loopback interface configuration switch> show running-config section loopback interface Loopback0 ip address 10.0.0.1/32 # VXLAN VTEP configuration switch> show running-config section vxlan interface Vxlan1 vxlan source-interface Loopback0 vxlan udp-port 4789 vxlan flood vtep 10.0.0.2 AND VXLAN extended VLAN or VNI must be routable - two examples are shown below: # Overlay interface switch> show running-config section vlan vlan 100 interface Ethernet1/1 switchport access vlan 100 interface Vlan100 ip address 1.0.0.1/24 Interface Vxlan1 vxlan vlan 100 vni 100000 switch> show running-config section red vrf instance red ip routing vrf red interface Vxlan1 vxlan vrf red vni 200000 Whether such a configuration exists can be checked as follows: switch> show vxlan vni VNI to VLAN Mapping for Vxlan1 VNI VLAN Source Interface 802.1Q Tag ------------ ---------- ------------ ----------------- ---------- 100000 100 static Ethernet1/1 untagged Vxlan1 100 VNI to dynamic VLAN Mapping for Vxlan1 VNI VLAN VRF Source ------------ ---------- --------- ------------ 200000 1006 red evpn switch> show vlan VLAN Name Status Ports ----- -------------------------------- --------- ------------------------------- 100 VLAN0100 active Cpu, Vx1 1006* VLAN1006 active Cpu, Vx1 switch> show ip interface brief Address Interface IP Address Status Protocol MTU Owner ----------------- --------------------- ------------ -------------- ----------- ------- Vlan100 1.0.0.1/24 up up 1500 Vlan1006 unassigned up up 10168 From the above outputs, it can be seen that IP routing is enabled, VXLAN is configured, and VNIs 100000 (mapped to VLAN 100) and 200000 (mapped to VRF red) are routable. (string)

}

]

datePublic : 2023-08-23T15:00:00.000Z (string)

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets. The device will continue to be susceptible to the issue until remediation is in place. (string)

}

]

value : On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets. The device will continue to be susceptible to the issue until remediation is in place. (string)

}

]

impacts : [ »

0 : { »

capecId : CAPEC-583 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : CAPEC-583 Disabling Network Hardware (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : HIGH (string)

attackVector : ADJACENT_NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 5.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-120 (string)

description : CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7 (string)

shortName : Arista (string)

dateUpdated : 2023-08-29T16:13:10.451Z (string)

}

references : [ »

0 : { »

url : https://www.arista.com/en/support/advisories-notices/security-advisory/18043-security-advisory-0089 (string)

}

]

solutions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Arista recommends customers move to the latest version of each release that contains all the fixes listed below. For more information about upgrading see <a target="_blank" rel="nofollow" href="https://www.arista.com/en/um-eos/eos-upgrades-and-downgrades">EOS User Manual: Upgrades and Downgrades</a> CVE-2023-24548 has been fixed in the following releases:<ul><li>4.30.0F and later releases in the 4.30.x train</li><li>4.29.0F and later releases in the 4.29.x train</li><li>4.28.0F and later releases in the 4.28.x train</li><li>4.27.0F and later releases in the 4.27.x train</li><li>4.26.0F and later releases in the 4.26.x train</li><li>4.25.1F and later releases in the 4.25.x train</li></ul>No remediation is planned for EOS software versions that are beyond their <a target="_blank" rel="nofollow" href="https://www.arista.com/en/support/product-documentation/eos-life-cycle-policy">standard EOS support lifecycle</a> (i.e. 4.22, 4.23). (string)

}

]

value : The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Arista recommends customers move to the latest version of each release that contains all the fixes listed below. For more information about upgrading see EOS User Manual: Upgrades and Downgrades https://www.arista.com/en/um-eos/eos-upgrades-and-downgrades CVE-2023-24548 has been fixed in the following releases: * 4.30.0F and later releases in the 4.30.x train * 4.29.0F and later releases in the 4.29.x train * 4.28.0F and later releases in the 4.28.x train * 4.27.0F and later releases in the 4.27.x train * 4.26.0F and later releases in the 4.26.x train * 4.25.1F and later releases in the 4.25.x train No remediation is planned for EOS software versions that are beyond their standard EOS support lifecycle https://www.arista.com/en/support/product-documentation/eos-life-cycle-policy (i.e. 4.22, 4.23). (string)

}

]

source : { »

advisory : Security Advisory 89 (string)

defect : [ »

0 : 828687 (string)

]

discovery : INTERNAL (string)

}

title : On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets (string)

workarounds : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : There is no known mitigation for the issue. The recommended resolution is to upgrade to a remediated software version at your earliest convenience. (string)

}

]

value : There is no known mitigation for the issue. The recommended resolution is to upgrade to a remediated software version at your earliest convenience. (string)

}

]

x_generator : { »

engine : Vulnogram 0.1.0-dev (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T11:03:18.834Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://www.arista.com/en/support/advisories-notices/security-advisory/18043-security-advisory-0089 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-24548 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-09-30T17:34:44.954023Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-09-30T17:46:14.286Z (string)

}

]

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "matchCriteriaId": "A9F1F226-FDB1-4452-B166-D08635DAEC5B", "versionEndIncluding": "4.22.13m", "versionStartIncluding": "4.22.1f", "vulnerable": true}, {"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "matchCriteriaId": "13BE6AE1-4649-4E0B-A4CA-2632CD400940", "versionEndIncluding": "4.23.14m", "versionStartIncluding": "4.23.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "matchCriteriaId": "2909559A-6FB4-400C-A1AE-BF2B883F4964", "versionEndIncluding": "4.24.11m", "versionStartIncluding": "4.24.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:arista:eos:4.25.0f:*:*:*:*:*:*:*", "matchCriteriaId": "37536357-7701-48BE-9751-9BADD8E4AAAF", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:arista:7280cr3-32d4:-:*:*:*:*:*:*:*", "matchCriteriaId": "7FEC18B3-7980-4EBF-8E15-F8E92DADD062", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7280cr3-32p4:-:*:*:*:*:*:*:*", "matchCriteriaId": "87E85F7C-F33B-49C1-A526-ACC1BEF3B65C", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7280cr3-36s:-:*:*:*:*:*:*:*", "matchCriteriaId": "A3B9CB1B-730E-45C9-A0B1-3C2F4A72A159", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7280cr3-96:-:*:*:*:*:*:*:*", "matchCriteriaId": "2E54F451-CA87-4F32-A088-AE18123CE07A", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7280cr3a-24d12:-:*:*:*:*:*:*:*", "matchCriteriaId": "43B967ED-2212-4558-A9AC-ACA94C94FD39", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7280cr3a-48d6:-:*:*:*:*:*:*:*", "matchCriteriaId": "CD7877C6-9DE4-4952-94D2-3A456D02CF1A", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7280cr3a-72:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FD635FB-5EA8-4B02-894C-4C016090AAB3", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7280dr3-24:-:*:*:*:*:*:*:*", "matchCriteriaId": "85D9E9FF-564E-4B16-8070-33A366F48FE9", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7280dr3a-36:-:*:*:*:*:*:*:*", "matchCriteriaId": "DC1F6DBC-212F-4E0B-B039-06955322B0D7", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7280dr3a-54:-:*:*:*:*:*:*:*", "matchCriteriaId": "BC474A71-8D2F-4138-9D65-E2F86B0B62DC", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7280dr3ak-36:-:*:*:*:*:*:*:*", "matchCriteriaId": "1943057A-5776-4B20-97C7-03CE14AEA367", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7280dr3ak-54:-:*:*:*:*:*:*:*", "matchCriteriaId": "1AE86A14-76ED-4427-94CC-7BF335BB9369", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7280dr3am-36:-:*:*:*:*:*:*:*", "matchCriteriaId": "986DCBF4-E4FB-41EE-BD1B-D62A4EC7237E", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7280dr3am-54:-:*:*:*:*:*:*:*", "matchCriteriaId": "4EA04EA0-170A-4B79-96B8-8F09D6FFC261", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7280pr3-24:-:*:*:*:*:*:*:*", "matchCriteriaId": "F14163D2-B236-4C78-9DB4-97DE6D996EBC", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7280r3:-:*:*:*:*:*:*:*", "matchCriteriaId": "60FC964C-9835-443A-A584-3A5D6022E914", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7280sr3-40yc6:-:*:*:*:*:*:*:*", "matchCriteriaId": "D4B5A8D4-43BA-4591-BE00-00031D4BDBE3", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7280sr3-48yc8:-:*:*:*:*:*:*:*", "matchCriteriaId": "8143579F-AD53-4D74-AE3E-4D465DCD7A57", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7280tr3-40c6:-:*:*:*:*:*:*:*", "matchCriteriaId": "939772F0-4352-46C1-B6D5-38FA12EBF6E1", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7500r3-24d:-:*:*:*:*:*:*:*", "matchCriteriaId": "BE1BB565-2668-4242-8A00-5CC9C30B9AC9", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7500r3-24p:-:*:*:*:*:*:*:*", "matchCriteriaId": "15F1A605-8836-4A64-AC5E-ADAB34F8F104", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7500r3-36cq:-:*:*:*:*:*:*:*", "matchCriteriaId": "BE8A047A-9FD9-4AE1-9E47-457A46BAE3A4", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7500r3k-36cq:-:*:*:*:*:*:*:*", "matchCriteriaId": "019B0670-389B-4A4E-8C72-52202E3AA8EF", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7500r3k-48y4d:-:*:*:*:*:*:*:*", "matchCriteriaId": "FCDF5089-5914-4B4F-A2E6-0EB2B40698A5", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7504r3:-:*:*:*:*:*:*:*", "matchCriteriaId": "8387CCEA-F00C-4F1F-B966-ACF8B16F1D22", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7508r3:-:*:*:*:*:*:*:*", "matchCriteriaId": "55AE2A1C-A4FD-423B-A77E-2E24C2310A6A", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7512r3:-:*:*:*:*:*:*:*", "matchCriteriaId": "C4B0D708-B426-4CA1-BE87-08BD14B7EACE", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7800r3-36d:-:*:*:*:*:*:*:*", "matchCriteriaId": "1E49B089-AE52-4B47-A3B4-547D10ACED9A", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7800r3-36p:-:*:*:*:*:*:*:*", "matchCriteriaId": "D19E86BF-AA91-4262-8EF9-B7FC48C6F3F8", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7800r3-48cq:-:*:*:*:*:*:*:*", "matchCriteriaId": "58443CDE-33D8-4460-A861-CDC07431AA22", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7800r3a-36d:-:*:*:*:*:*:*:*", "matchCriteriaId": "26FDC60C-860F-40BD-AF13-54712B56C87F", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7800r3a-36dm:-:*:*:*:*:*:*:*", "matchCriteriaId": "70658CB0-D114-40E5-866D-B21875FFF93C", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7800r3a-36p:-:*:*:*:*:*:*:*", "matchCriteriaId": "E6BBA281-F67E-4D13-BDCD-E1164912EC8C", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7800r3a-36pm:-:*:*:*:*:*:*:*", "matchCriteriaId": "F3B0C0EE-3C5E-4E3E-9BAE-9D5D06A98CAB", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7800r3ak-36dm:-:*:*:*:*:*:*:*", "matchCriteriaId": "ABAC894C-D39E-4BB2-A968-E2F23C299A29", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7800r3ak-36pm:-:*:*:*:*:*:*:*", "matchCriteriaId": "D2C6E3F9-0191-4BC5-A89C-58BF13C195B6", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7800r3k-36dm:-:*:*:*:*:*:*:*", "matchCriteriaId": "C0B813A1-8BD1-4AFA-95A3-5947A918E9AF", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7800r3k-48cq:-:*:*:*:*:*:*:*", "matchCriteriaId": "64BE8C68-FE98-4162-A3D3-54494D5444F5", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7800r3k-48cqms:-:*:*:*:*:*:*:*", "matchCriteriaId": "9615121C-4EC0-44F5-8C00-E70271CC04A2", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7800r3k-72y7512r3:-:*:*:*:*:*:*:*", "matchCriteriaId": "185E4E68-D5EF-4B7B-B1EF-7EF1B00F118C", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7808r3:-:*:*:*:*:*:*:*", "matchCriteriaId": "2F078B04-2DA0-4A4B-BB1A-408DC14CB61F", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7812r3:-:*:*:*:*:*:*:*", "matchCriteriaId": "E9B99200-EC76-404E-9900-5D1DC3B9A758", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:7816r3:-:*:*:*:*:*:*:*", "matchCriteriaId": "5A172A49-1A0E-464B-BDDD-A8F52856D595", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets. The device will continue to be susceptible to the issue until remediation is in place.\n"}], "id": "CVE-2023-24548", "lastModified": "2024-11-21T07:48:06.157", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 3.6, "source": "psirt@arista.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-08-29T17:15:11.790", "references": [{"source": "psirt@arista.com", "tags": ["Exploit", "Vendor Advisory"], "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/18043-security-advisory-0089"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Vendor Advisory"], "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/18043-security-advisory-0089"}], "sourceIdentifier": "psirt@arista.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-120"}], "source": "psirt@arista.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-120"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:* (string)

matchCriteriaId : A9F1F226-FDB1-4452-B166-D08635DAEC5B (string)

versionEndIncluding : 4.22.13m (string)

versionStartIncluding : 4.22.1f (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 13BE6AE1-4649-4E0B-A4CA-2632CD400940 (string)

versionEndIncluding : 4.23.14m (string)

versionStartIncluding : 4.23.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 2909559A-6FB4-400C-A1AE-BF2B883F4964 (string)

versionEndIncluding : 4.24.11m (string)

versionStartIncluding : 4.24.0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:arista:eos:4.25.0f:*:*:*:*:*:*:* (string)

matchCriteriaId : 37536357-7701-48BE-9751-9BADD8E4AAAF (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:arista:7280cr3-32d4:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7FEC18B3-7980-4EBF-8E15-F8E92DADD062 (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:arista:7280cr3-32p4:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 87E85F7C-F33B-49C1-A526-ACC1BEF3B65C (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:arista:7280cr3-36s:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A3B9CB1B-730E-45C9-A0B1-3C2F4A72A159 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:arista:7280cr3-96:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2E54F451-CA87-4F32-A088-AE18123CE07A (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:arista:7280cr3a-24d12:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 43B967ED-2212-4558-A9AC-ACA94C94FD39 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:arista:7280cr3a-48d6:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CD7877C6-9DE4-4952-94D2-3A456D02CF1A (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:arista:7280cr3a-72:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2FD635FB-5EA8-4B02-894C-4C016090AAB3 (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:arista:7280dr3-24:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 85D9E9FF-564E-4B16-8070-33A366F48FE9 (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:arista:7280dr3a-36:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DC1F6DBC-212F-4E0B-B039-06955322B0D7 (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:arista:7280dr3a-54:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BC474A71-8D2F-4138-9D65-E2F86B0B62DC (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:arista:7280dr3ak-36:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 1943057A-5776-4B20-97C7-03CE14AEA367 (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:arista:7280dr3ak-54:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 1AE86A14-76ED-4427-94CC-7BF335BB9369 (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:arista:7280dr3am-36:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 986DCBF4-E4FB-41EE-BD1B-D62A4EC7237E (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:h:arista:7280dr3am-54:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 4EA04EA0-170A-4B79-96B8-8F09D6FFC261 (string)

vulnerable : false (boolean)

}

14 : { »

criteria : cpe:2.3:h:arista:7280pr3-24:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F14163D2-B236-4C78-9DB4-97DE6D996EBC (string)

vulnerable : false (boolean)

}

15 : { »

criteria : cpe:2.3:h:arista:7280r3:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 60FC964C-9835-443A-A584-3A5D6022E914 (string)

vulnerable : false (boolean)

}

16 : { »

criteria : cpe:2.3:h:arista:7280sr3-40yc6:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D4B5A8D4-43BA-4591-BE00-00031D4BDBE3 (string)

vulnerable : false (boolean)

}

17 : { »

criteria : cpe:2.3:h:arista:7280sr3-48yc8:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8143579F-AD53-4D74-AE3E-4D465DCD7A57 (string)

vulnerable : false (boolean)

}

18 : { »

criteria : cpe:2.3:h:arista:7280tr3-40c6:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 939772F0-4352-46C1-B6D5-38FA12EBF6E1 (string)

vulnerable : false (boolean)

}

19 : { »

criteria : cpe:2.3:h:arista:7500r3-24d:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BE1BB565-2668-4242-8A00-5CC9C30B9AC9 (string)

vulnerable : false (boolean)

}

20 : { »

criteria : cpe:2.3:h:arista:7500r3-24p:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 15F1A605-8836-4A64-AC5E-ADAB34F8F104 (string)

vulnerable : false (boolean)

}

21 : { »

criteria : cpe:2.3:h:arista:7500r3-36cq:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BE8A047A-9FD9-4AE1-9E47-457A46BAE3A4 (string)

vulnerable : false (boolean)

}

22 : { »

criteria : cpe:2.3:h:arista:7500r3k-36cq:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 019B0670-389B-4A4E-8C72-52202E3AA8EF (string)

vulnerable : false (boolean)

}

23 : { »

criteria : cpe:2.3:h:arista:7500r3k-48y4d:-:*:*:*:*:*:*:* (string)

matchCriteriaId : FCDF5089-5914-4B4F-A2E6-0EB2B40698A5 (string)

vulnerable : false (boolean)

}

24 : { »

criteria : cpe:2.3:h:arista:7504r3:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8387CCEA-F00C-4F1F-B966-ACF8B16F1D22 (string)

vulnerable : false (boolean)

}

25 : { »

criteria : cpe:2.3:h:arista:7508r3:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 55AE2A1C-A4FD-423B-A77E-2E24C2310A6A (string)

vulnerable : false (boolean)

}

26 : { »

criteria : cpe:2.3:h:arista:7512r3:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C4B0D708-B426-4CA1-BE87-08BD14B7EACE (string)

vulnerable : false (boolean)

}

27 : { »

criteria : cpe:2.3:h:arista:7800r3-36d:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 1E49B089-AE52-4B47-A3B4-547D10ACED9A (string)

vulnerable : false (boolean)

}

28 : { »

criteria : cpe:2.3:h:arista:7800r3-36p:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D19E86BF-AA91-4262-8EF9-B7FC48C6F3F8 (string)

vulnerable : false (boolean)

}

29 : { »

criteria : cpe:2.3:h:arista:7800r3-48cq:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 58443CDE-33D8-4460-A861-CDC07431AA22 (string)

vulnerable : false (boolean)

}

30 : { »

criteria : cpe:2.3:h:arista:7800r3a-36d:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 26FDC60C-860F-40BD-AF13-54712B56C87F (string)

vulnerable : false (boolean)

}

31 : { »

criteria : cpe:2.3:h:arista:7800r3a-36dm:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 70658CB0-D114-40E5-866D-B21875FFF93C (string)

vulnerable : false (boolean)

}

32 : { »

criteria : cpe:2.3:h:arista:7800r3a-36p:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E6BBA281-F67E-4D13-BDCD-E1164912EC8C (string)

vulnerable : false (boolean)

}

33 : { »

criteria : cpe:2.3:h:arista:7800r3a-36pm:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F3B0C0EE-3C5E-4E3E-9BAE-9D5D06A98CAB (string)

vulnerable : false (boolean)

}

34 : { »

criteria : cpe:2.3:h:arista:7800r3ak-36dm:-:*:*:*:*:*:*:* (string)

matchCriteriaId : ABAC894C-D39E-4BB2-A968-E2F23C299A29 (string)

vulnerable : false (boolean)

}

35 : { »

criteria : cpe:2.3:h:arista:7800r3ak-36pm:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D2C6E3F9-0191-4BC5-A89C-58BF13C195B6 (string)

vulnerable : false (boolean)

}

36 : { »

criteria : cpe:2.3:h:arista:7800r3k-36dm:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C0B813A1-8BD1-4AFA-95A3-5947A918E9AF (string)

vulnerable : false (boolean)

}

37 : { »

criteria : cpe:2.3:h:arista:7800r3k-48cq:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 64BE8C68-FE98-4162-A3D3-54494D5444F5 (string)

vulnerable : false (boolean)

}

38 : { »

criteria : cpe:2.3:h:arista:7800r3k-48cqms:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 9615121C-4EC0-44F5-8C00-E70271CC04A2 (string)

vulnerable : false (boolean)

}

39 : { »

criteria : cpe:2.3:h:arista:7800r3k-72y7512r3:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 185E4E68-D5EF-4B7B-B1EF-7EF1B00F118C (string)

vulnerable : false (boolean)

}

40 : { »

criteria : cpe:2.3:h:arista:7808r3:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2F078B04-2DA0-4A4B-BB1A-408DC14CB61F (string)

vulnerable : false (boolean)

}

41 : { »

criteria : cpe:2.3:h:arista:7812r3:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E9B99200-EC76-404E-9900-5D1DC3B9A758 (string)

vulnerable : false (boolean)

}

42 : { »

criteria : cpe:2.3:h:arista:7816r3:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5A172A49-1A0E-464B-BDDD-A8F52856D595 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets. The device will continue to be susceptible to the issue until remediation is in place. (string)

}

]

id : CVE-2023-24548 (string)

lastModified : 2024-11-21T07:48:06.157 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : ADJACENT_NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 5.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.6 (number)

impactScore : 3.6 (number)

source : psirt@arista.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : ADJACENT_NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-08-29T17:15:11.790 (string)

references : [ »

0 : { »

source : psirt@arista.com (string)

tags : [ »

0 : Exploit (string)

1 : Vendor Advisory (string)

]

url : https://www.arista.com/en/support/advisories-notices/security-advisory/18043-security-advisory-0089 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Exploit (string)

1 : Vendor Advisory (string)

]

url : https://www.arista.com/en/support/advisories-notices/security-advisory/18043-security-advisory-0089 (string)

}

]

sourceIdentifier : psirt@arista.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-120 (string)

}

]

source : psirt@arista.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-120 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Adjacent Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Adjacent Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object