CVE-2020-15898

In Arista EOS malformed packets can be incorrectly forwarded across VLAN boundaries in one direction

published December 28, 2020

CVSS
—
EPSS
1%
Percentile
62.1
In the wild
Unconfirmed
What it is

In Arista EOS malformed packets can be incorrectly forwarded across VLAN boundaries in one direction. This vulnerability is only susceptible to exploitation by unidirectional traffic (ex. UDP) and not bidirectional traffic (ex. TCP). This affects: EOS 7170 platforms version 4.21.4.1F and below releases in the 4.21.x train; EOS X-Series versions 4.21.11M and below releases in the 4.21.x train; 4.22.6M and below releases in the 4.22.x train; 4.23.4M and below releases in the 4.23.x train; 4.24.2.1F and below releases in the 4.24.x train.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00987 · 62.1th percentile
Published
2020-12-28T18:16Z
EPSS history
Timeline
  • 28 DEC 18:16Z
    In Arista EOS malformed packets can be incorrectly forwarded across VLAN boundaries in one direction
    cvelistv5