CVE-2020-17355

Description

Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause a denial of service (restart of agents) by crafting a malformed DHCP packet which leads to an incorrect route being installed.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.56

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities affected in eos 4.21.0fNCM
Vulnerabilities CVE-2018-14008 ,CVE-2019-18948 ,CVE-2020-15897 ,CVE-2020-17355 are affected in eos 4.21.0NCM
Vulnerabilities CVE-2019-18948 ,CVE-2020-15897 ,CVE-2020-17355 ,CVE-2020-24360 ,CVE-2020-26569 are affected in eos 4.23.1fNCM
Vulnerabilities CVE-2019-18948 ,CVE-2020-15897 ,CVE-2020-17355 ,CVE-2020-24360 ,CVE-2020-26569 are affected in eos 4.23.0fNCM
Vulnerabilities CVE-2019-18948 ,CVE-2020-15897 ,CVE-2020-17355 ,CVE-2020-24360 ,CVE-2020-26569 are affected in eos 4.22.3mNCM
Vulnerabilities CVE-2019-18948 ,CVE-2020-15897 ,CVE-2020-17355 ,CVE-2020-26569 are affected in eos 4.21.8mNCM
Vulnerabilities CVE-2019-18948 ,CVE-2020-15897 ,CVE-2020-17355 ,CVE-2020-26569 are affected in eos 4.21.8NCM
Vulnerabilities CVE-2019-18948 ,CVE-2020-15897 ,CVE-2020-15898 ,CVE-2020-17355 ,CVE-2020-26569 are affected in eos 4.21.3NCM
Vulnerabilities CVE-2019-18948 ,CVE-2020-15897 ,CVE-2020-15898 ,CVE-2020-17355 ,CVE-2020-26569 are affected in eos 4.21.2.4NCM
Vulnerabilities CVE-2019-18948 ,CVE-2020-15897 ,CVE-2020-15898 ,CVE-2020-17355 ,CVE-2020-26569 are affected in eos 4.21.1fNCM
Vulnerabilities CVE-2020-15897 ,CVE-2020-17355 ,CVE-2020-24360 ,CVE-2020-26569 are affected in eos 4.24.0fNCM
Vulnerabilities CVE-2020-15897 ,CVE-2020-17355 ,CVE-2020-24360 ,CVE-2020-26569 are affected in eos 4.23.2fNCM
Vulnerabilities CVE-2020-15897 ,CVE-2020-17355 are affected in eos 4.23NCM
Vulnerabilities CVE-2020-15897 ,CVE-2020-17355 ,CVE-2020-24360 ,CVE-2020-26569 are affected in eos 4.22.4mNCM
Vulnerabilities CVE-2020-15897 ,CVE-2020-17355 are affected in eos 4.22NCM
Vulnerabilities CVE-2020-15897 ,CVE-2020-17355 ,CVE-2020-26569 are affected in eos 4.21.9mNCM
CVE-2020-17355NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234