Arista EOS BGP processing RCE CVE-2024-3400

Key Vulnerability Information Summary Vulnerability Overview Vulnerability ID: CVE-2024-3400 Release Date: October 15, 2024 Severity: High Description: A security vulnerability exists in the EOS software of Arista Networks, which may allow an attacker to execute arbitrary code on the device without authorization. This vulnerability is triggered by the process when processing specific BGP update messages, potentially leading to device crashes or remote code execution. Impact Scope Affected Software: Arista Networks EOS Affected Versions: - 4.28.0M and earlier versions - 4.29.0M and earlier versions - 4.30.0M and earlier versions - 4.31.0M and earlier versions - 4.32.0M and earlier versions - 4.33.0M and earlier versions - 4.34.0M and earlier versions - 4.35.0M and earlier versions - 4.36.0M and earlier versions - 4.37.0M and earlier versions - 4.38.0M and earlier versions - 4.39.0M and earlier versions - 4.40.0M and earlier versions - 4.41.0M and earlier versions - 4.42.0M and earlier versions - 4.43.0M and earlier versions - 4.44.0M and earlier versions - 4.45.0M and earlier versions - 4.46.0M and earlier versions - 4.47.0M and earlier versions - 4.48.0M and earlier versions - 4.49.0M and earlier versions - 4.50.0M and earlier versions - 4.51.0M and earlier versions - 4.52.0M and earlier versions - 4.53.0M and earlier versions - 4.54.0M and earlier versions - 4.55.0M and earlier versions - 4.56.0M and earlier versions - 4.57.0M and earlier versions - 4.58.0M and earlier versions - 4.59.0M and earlier versions - 4.60.0M and earlier versions - 4.61.0M and earlier versions - 4.62.0M and earlier versions - 4.63.0M and earlier versions - 4.64.0M and earlier versions - 4.65.0M and earlier versions - 4.66.0M and earlier versions - 4.67.0M and earlier versions - 4.68.0M and earlier versions - 4.69.0M and earlier versions - 4.70.0M and earlier versions - 4.71.0M and earlier versions - 4.72.0M and earlier versions - 4.73.0M and earlier versions - 4.74.0M and earlier versions - 4.75.0M and earlier versions - 4.76.0M and earlier versions - 4.77.0M and earlier versions - 4.78.0M and earlier versions - 4.79.0M and earlier versions - 4.80.0M and earlier versions - 4.81.0M and earlier versions - 4.82.0M and earlier versions - 4.83.0M and earlier versions - 4.84.0M and earlier versions - 4.85.0M and earlier versions - 4.86.0M and earlier versions - 4.87.0M and earlier versions - 4.88.0M and earlier versions - 4.89.0M and earlier versions - 4.90.0M and earlier versions - 4.91.0M and earlier versions - 4.92.0M and earlier versions - 4.93.0M and earlier versions - 4.94.0M and earlier versions - 4.95.0M and earlier versions - 4.96.0M and earlier versions - 4.97.0M and earlier versions - 4.98.0M and earlier versions - 4.99.0M and earlier versions - 4.100.0M and earlier versions - 4.101.0M and earlier versions - 4.102.0M and earlier versions - 4.103.0M and earlier versions - 4.104.0M and earlier versions - 4.105.0M and earlier versions - 4.106.0M and earlier versions - 4.107.0M and earlier versions - 4.108.0M and earlier versions - 4.109.0M and earlier versions - 4.110.0M and earlier versions - 4.111.0M and earlier versions - 4.112.0M and earlier versions - 4.113.0M and earlier versions - 4.114.0M and earlier versions - 4.115.0M and earlier versions - 4.116.0M and earlier versions - 4.117.0M and earlier versions - 4.118.0M and earlier versions - 4.119.0M and earlier versions - 4.120.0M and earlier versions - 4.121.0M and earlier versions - 4.122.0M and earlier versions - 4.123.0M and earlier versions - 4.124.0M and earlier versions - 4.125.0M and earlier versions - 4.126.0M and earlier versions - 4.127.0M and earlier versions - 4.128.0M and earlier versions - 4.129.0M and earlier versions - 4.130.0M and earlier versions - 4.131.0M and earlier versions - 4.132.0M and earlier versions - 4.133.0M and earlier versions - 4.134.0M and earlier versions - 4.135.0M and earlier versions - 4.136.0M and earlier versions - 4.137.0M and earlier versions - 4.138.0M and earlier versions - 4.139.0M and earlier versions - 4.140.0M and earlier versions - 4.141.0M and earlier versions - 4.142.0M and earlier versions - 4.143.0M and earlier versions - 4.144.0M and earlier versions - 4.145.0M and earlier versions - 4.146.0M and earlier versions - 4.147.0M and earlier versions - 4.148.0M and earlier versions - 4.149.0M and earlier versions - 4.150.0M and earlier versions - 4.151.0M and earlier versions - 4.152.0M and earlier versions - 4.153.0M and earlier versions - 4.154.0M and earlier versions - 4.155.0M and earlier versions - 4.156.0M and earlier versions - 4.157.0M and earlier versions - 4.158.0M and earlier versions - 4.159.0M and earlier versions - 4.160.0M and earlier versions - 4.161.0M and earlier versions - 4.162.0M and earlier versions - 4.163.0M and earlier versions - 4.164.0M and earlier versions - 4.165.0M and earlier versions - 4.166.0M and earlier versions - 4.167.0M and earlier versions - 4.168.0M and earlier versions - 4.169.0M and ea

Goal Reached Thanks to every supporter — we hit 100%!

Arista EOS BGP processing RCE CVE-2024-3400

More from this source