CVE-2024-5872
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Jan 10, 2025
Summary
CVE-2024-5872 is a vulnerability affecting Arista EOS platforms. Maliciously crafted packets with incorrect VLAN tags can cause the CPU to process and copy these packets, leading to incorrect control plane behavior. This issue may result in route flaps or the learning of multicast routes, posing a potential security risk. Arista EOS users are advised to apply the necessary patches to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Arista EOS
Affected Vendors
- Arista