CVE-2024-27891CWE-284

On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports.

Medium · published June 4, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
19.6
In the wild
Unconfirmed
What it is

On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports. This can cause outgoing packets to incorrectly be allowed or denied.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00282 · 19.6th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-06-04T22:08Z
EPSS history
Timeline
  • 04 JUN 22:08Z
    On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports.
    cvelistv5