Vulnerabilities > CVE-2020-15897 - Unspecified vulnerability in Arista EOS

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

PARTIAL

network

low complexity

arista

NVD

Published: 2020-10-26

Updated: 2020-11-02

Summary

Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause traffic loss or incorrect forwarding of traffic via a malformed link-state PDU to the IS-IS router.

Vulnerable Configurations

Part	Description	Count
OS	Arista Arista EOS 4.15 Arista EOS 4.15.3F Arista EOS 4.16 Arista EOS 4.17 Arista EOS 4.17.0F Arista EOS 4.18 Arista EOS 4.18.0F Arista EOS 4.18.1F Arista EOS 4.19 Arista EOS 4.20 Arista EOS 4.20.1 Arista EOS 4.20.1F Arista EOS 4.20.4.1 Arista EOS 4.20.5 Arista EOS 4.20.5F Arista EOS 4.20.15 Arista EOS 4.21.0 Arista EOS 4.21.0F Arista EOS 4.21.1F Arista EOS 4.21.2.4 Arista EOS 4.21.3 Arista EOS 4.21.8 Arista EOS 4.21.8M Arista EOS 4.21.9M Arista EOS 4.22 Arista EOS 4.22.3M Arista EOS 4.22.4M Arista EOS 4.23 Arista EOS 4.23.0F Arista EOS 4.23.1F Arista EOS 4.23.2F Arista EOS 4.24.0F	32

References

https://www.arista.com/en/support/advisories-notices/security-advisories/11760-security-advisory-54