CVE-2024-6858 — In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if ther…

CVE-2024-6858

In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN. PUBLISHED

Description (CNA)

In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN.

Affected (CNA)

Vendor / product	Versions
Arista Networks / EOS	affected 4.31.0 through 4.31.1F; affected 4.30.0 through 4.30.5M; affected 4.29.0 through 4.29.7M; affected 4.28.10 through 4.28.10.1M

CWE

CWE-1287

References

https://www.arista.com/en/support/advisories-notices/security-advisory/19917-security-advisory-0103

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.