VLAN Isolation Breach in Arista EOS Network Switches
CVE-2024-11185
6.5MEDIUM
What is CVE-2024-11185?
On platforms utilizing Arista EOS, a vulnerability exists that may cause ingress traffic on Layer 2 ports to be misdirected to ports on different VLANs. This misrouting can compromise the intended isolation and segmentation of network traffic, potentially exposing sensitive data to unauthorized access. Administrators should assess configurations to mitigate this risk effectively.
Affected Version(s)
EOS EOS 4.29.0 <= 4.29.10M
EOS EOS 4.30.0 <= 4.30.9M
EOS EOS 4.31.0 <= 4.31.6M