CVE-2020-15897

published 2020-10-26

CVE-2020-15897: Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause traffic loss or incorrect…

Priority P3 40 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause traffic loss or incorrect forwarding of traffic via a malformed link-state PDU to the IS-IS router.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
arista	eos	< 4.21.12m	4.21.12m
arista	eos	>= 4.22 < 4.22.7m	4.22.7m
arista	eos	>= 4.23 < 4.23.5m	4.23.5m
arista	eos	>= 4.24 < 4.24.2f	4.24.2f

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.