CVE-2020-15898

published 2020-12-28

CVE-2020-15898: In Arista EOS malformed packets can be incorrectly forwarded across VLAN boundaries in one direction. This vulnerability is only susceptible to exploitation by…

Priority P4 27 medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C N I L A N

In Arista EOS malformed packets can be incorrectly forwarded across VLAN boundaries in one direction. This vulnerability is only susceptible to exploitation by unidirectional traffic (ex. UDP) and not bidirectional traffic (ex. TCP). This affects: EOS 7170 platforms version 4.21.4.1F and below releases in the 4.21.x train; EOS X-Series versions 4.21.11M and below releases in the 4.21.x train; 4.22.6M and below releases in the 4.22.x train; 4.23.4M and below releases in the 4.23.x train; 4.24.2.1F and below releases in the 4.24.x train.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
arista	eos	4.21.0f – 4.21.4.1f	—
arista	eos	4.21.0f – 4.21.11m	—
arista	eos	4.22.0f – 4.22.6m	—
arista	eos	4.23.0f – 4.23.4m	—
arista	eos	4.24.0f – 4.24.2.1f	—

CVSS provenance

nvd v3.1 5.3 MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.