CVE-2020-15897 — EOS vulnerability

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.7%
top 28.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Arista EOS
Timeline
PublishedOct 26
Latest updateMay 24

Description

Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause traffic loss or incorrect forwarding of traffic via a malformed link-state PDU to the IS-IS router.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

▶NVDarista/eos4.22 — 4.22.7m+3

🔴Vulnerability Details

2
GHSA
GHSA-9pm5-4php-6g34: Arista EOS before 4↗2022-05-24
▶
CVEList
CVE-2020-15897: Arista EOS before 4↗2020-10-26
▶
CVE-2020-15897 — Arista EOS vulnerability | cvebase