CVE-2023-24548

6.5 mediumEPSS 0.5%

Medium (6.5) in arista eos. EPSS 0.5% chance of exploitation in the next 30 days.

On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets. The device will continue to be susceptible to the issue until remediation is in place.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWE: CWE-120
Published: 2023-08-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

arista:eos

References

https://www.arista.com/en/support/advisories-notices/security-advisory/18043-security-advisory-0089
https://www.arista.com/en/support/advisories-notices/security-advisory/18043-security-advisory-0089

Check your stack JSON