CVE-2024-6437

Katalog CVE

CVSS 5.8 · Medium EPSS 0,51%

Skor CVSS 3.1 5.8 (Medium) menurut arista.com.

Deskripsi (NVD)

On affected platforms running Arista EOS with one of the following features configured to redirect IP traffic to a next hop: policy-based routing (PBR), BGP Flowspec, or interface traffic policy -- certain IP traffic such as IPv4 packets with IP options may bypass the feature's set nexthop action and be slow-path forwarded (FIB routed) by the kernel as the packets are trapped to the CPU instead of following the redirect action's destination.

Rincian

Terbit di NVD

10 Januari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Deferred

CVSS 3.1

5.8 (Medium), sumber arista.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L · uraikan di kalkulator

EPSS (30 hari)

0,51% peluang dieksploitasi; lebih tinggi dari 41,5% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://www.arista.com/en/support/advisories-notices/security-advisory/20689-security-advisory-0108