CVE-2024-12378 — On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in…

CVE-2024-12378

On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear. PUBLISHED

Description (CNA)

On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear.

Affected (CNA)

Vendor / product	Versions
Arista Networks / CloudVision Portal	affected 4.32.0 through 4.32.2F; affected 4.31.0 through 4.31.6M; affected 4.30.0 through 4.30.8M; affected 4.29.0 through 4.29.9M; affected 4.28.0 through 4.28.12M; affected 4.27.0 through 4.27.12M

CWE

CWE-319

References

https://www.arista.com/en/support/advisories-notices/security-advisory/21289-security-advisory-0113

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.