Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2024-12378

On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Arista

Description

On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Arista Networks CloudVision Portal

Default version status: unaffected

  • 4.32.0 to ≤ 4.32.2Faffected
  • 4.31.0 to ≤ 4.31.6Maffected
  • 4.30.0 to ≤ 4.30.8Maffected
  • 4.29.0 to ≤ 4.29.9Maffected
  • 4.28.0 to ≤ 4.28.12Maffected
  • 4.27.0 to ≤ 4.27.12Maffected

References