On affected platforms running Arista EOS with one of the following features configured to redirect IP traffic to a next hop: policy-based routing (PBR), BGP Flowspec, or interface traffic policy -- certain IP traffic such as IPv4 packets with IP options ma
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: poc
- Automatable: no
- Technical impact: partial
Summary
On affected platforms running Arista EOS with one of the following features configured to redirect IP traffic to a next hop: policy-based routing (PBR), BGP Flowspec, or interface traffic policy -- certain IP traffic such as IPv4 packets with IP options may bypass the feature's set nexthop action and be slow-path forwarded (FIB routed) by the kernel as the packets are trapped to the CPU instead of following the redirect action's destination.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: poc · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Arista Networks EOS-Policy Based Routing (PBR)
From 4.32.0F · through 4.32.1F; From 4.31.0M · through 4.31.4M; From 4.30.0M · through 4.30.7M; From 4.29.0M · through 4.29.9M; From 4.28.0M · through 4.28.11M; From 4.27.0M · through 4.27.12M; From 4.26.0M · through 4.26.14M; From 4.25.0M · through 4.25.11M; From 4.24.0M · through 4.24.11M; From 4.23.0M · through 4.23.15M; From 4.22.0M · through 4.22.13M; From 4.21.0M · through 4.21.15M
- Arista Networks EOS - BGP Flowspec
From 4.32.0F · through 4.32.1F; From 4.31.0M · through 4.31.4M; From 4.30.0M · through 4.30.7M; From 4.29.0M · through 4.29.9M; From 4.28.0M · through 4.28.11M; From 4.27.0M · through 4.27.12M; From 4.26.0M · through 4.26.14M; From 4.25.0M · through 4.25.11M; From 4.24.0M · through 4.24.11M; From 4.23.0M · through 4.23.15M; From 4.22.0M · through 4.22.13M; From 4.21.3F · through 4.21.15M
- Arista Networks EOS - Interface Traffic Policy
From 4.32.0F · through 4.32.1F; From 4.31.0M · through 4.31.4M; From 4.30.0M · through 4.30.7M; From 4.29.0M · through 4.29.9M; From 4.28.0M · through 4.28.11M; From 4.27.2F · through 4.27.12F