CVE-2024-11185: On affected platforms running Arista EOS, ingress traffic on Layer 2 ports may, under certain conditions, be improperly forwarded to ports associated with…

PriorityP433medium6.5CVSS 3.1

AVNACLPRNUINSUCLILAN

EPSS

0.21%

11.7th percentile

On affected platforms running Arista EOS, ingress traffic on Layer 2 ports may, under certain conditions, be improperly forwarded to ports associated with different VLANs, resulting in a breach of VLAN isolation and segmentation boundaries.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
arista_networks	eos	4.29.0 – 4.29.10M	—
arista_networks	eos	4.30.0 – 4.30.9M	—
arista_networks	eos	4.31.0 – 4.31.6M	—
arista_networks	eos	4.32.0 – 4.32.3M	—
arista_networks	eos	4.33.0 – 4.33.1F	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.