CVE-2023-5502 — On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, a malicious…

CVE-2023-5502

On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, a malicious supplicant may bypass authentication. PUBLISHED

Description (CNA)

On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, and routing enabled on the access VLAN of the ports, a malicious supplicant may be able to bypass the requirement to perform 802.1x authentication.

Affected (CNA)

Vendor / product	Versions
Arista Networks / EOS	affected 4.31.0 through 4.31.0F; affected 4.30.0 through 4.30.4M; affected 4.29.0 through 4.29.6M; affected 4.28.0 through 4.28.8M; affected 4.27.0 through 4.27.11M; affected 4.26.0 through 4.26.11M; affected 4.25.0 through 4.25.11M; affected 4.24.0 through 4.24.11M

CWE

CWE-287

References

https://www.arista.com/en/support/advisories-notices/security-advisory/19462-security-advisory-0096

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.