mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-06-19 17:31:42 +00:00
259 lines
9.5 KiB
JSON
259 lines
9.5 KiB
JSON
{
|
|
"id": "CVE-2020-24360",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2020-12-28T19:15:12.847",
|
|
"lastModified": "2021-01-05T15:19:23.050",
|
|
"vulnStatus": "Analyzed",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "An issue with ARP packets in Arista\u2019s EOS affecting the 7800R3, 7500R3, and 7280R3 series of products may result in issues that cause a kernel crash, followed by a device reload. The affected Arista EOS versions are: 4.24.2.4F and below releases in the 4.24.x train; 4.23.4M and below releases in the 4.23.x train; 4.22.6M and below releases in the 4.22.x train."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Un problema con los paquetes ARP en el EOS de Arista afectando a la serie de productos 7800R3, 7500R3 y 7280R3, puede resultar en un problema que causa un bloqueo del kernel, seguido de una recarga del dispositivo. Las versiones de Arista EOS afectadas son: 4.24.2.4F y versiones por debajo en el tren 4.24.x; 4.23.4M y versiones por debajo en el tren 4.23.x; 4.22.6M y versiones por debajo en el tren 4.22.x"
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV31": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
|
|
"attackVector": "ADJACENT_NETWORK",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "NONE",
|
|
"userInteraction": "NONE",
|
|
"scope": "CHANGED",
|
|
"confidentialityImpact": "NONE",
|
|
"integrityImpact": "NONE",
|
|
"availabilityImpact": "HIGH",
|
|
"baseScore": 7.4,
|
|
"baseSeverity": "HIGH"
|
|
},
|
|
"exploitabilityScore": 2.8,
|
|
"impactScore": 4.0
|
|
}
|
|
],
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C",
|
|
"accessVector": "ADJACENT_NETWORK",
|
|
"accessComplexity": "LOW",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "NONE",
|
|
"integrityImpact": "NONE",
|
|
"availabilityImpact": "COMPLETE",
|
|
"baseScore": 6.1
|
|
},
|
|
"baseSeverity": "MEDIUM",
|
|
"exploitabilityScore": 6.5,
|
|
"impactScore": 6.9,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": false
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-404"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "4.22.0f",
|
|
"versionEndIncluding": "4.22.6m",
|
|
"matchCriteriaId": "188A9EBD-1DD4-4111-A66D-67C0A0035662"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "4.23.0f",
|
|
"versionEndIncluding": "4.23.4m",
|
|
"matchCriteriaId": "F80FCF7B-38CD-43B5-82EE-139A0D249D70"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "4.24.0f",
|
|
"versionEndIncluding": "4.24.2.4f",
|
|
"matchCriteriaId": "9AA43823-81E3-461A-8DC0-0D74D075A0FD"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7280cr2ak-30:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "99506386-8D68-46F4-AEA9-4C16C16545B9"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7280cr2k-60:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "5F569286-C19F-48CB-AB24-89C4A1EB6F81"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7280cr3-32d4:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7FEC18B3-7980-4EBF-8E15-F8E92DADD062"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7280cr3-32p4:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "87E85F7C-F33B-49C1-A526-ACC1BEF3B65C"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7280cr3-96:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "2E54F451-CA87-4F32-A088-AE18123CE07A"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7280cr3k-32d4:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "16CB1780-6DEC-4140-A771-9139C77A8A88"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7280cr3k-32p4:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "11DE9CB6-4453-4EED-B7FC-6374F9225B83"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7280cr3k-96:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A98C94CB-7DFC-4CAC-9D98-B3E80BF1EE56"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7280dr3-24:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "85D9E9FF-564E-4B16-8070-33A366F48FE9"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7280dr3k-24:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "56AF4A54-7568-4FE0-BE5F-02BD9FADDCE5"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7280pr3-24:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "F14163D2-B236-4C78-9DB4-97DE6D996EBC"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7280pr3k-24:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "4057906A-B27B-4B53-97F6-3F5F35794990"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7280sr3-48yc8:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "8143579F-AD53-4D74-AE3E-4D465DCD7A57"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7280sr3k-48yc8:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "79AB0F1D-ACCA-490C-96F2-FC23A8611CB8"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7500r3-24d:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "BE1BB565-2668-4242-8A00-5CC9C30B9AC9"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7500r3-24p:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "15F1A605-8836-4A64-AC5E-ADAB34F8F104"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7500r3-36cq:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "BE8A047A-9FD9-4AE1-9E47-457A46BAE3A4"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7500r3k-36cq:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "019B0670-389B-4A4E-8C72-52202E3AA8EF"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7504r3:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "8387CCEA-F00C-4F1F-B966-ACF8B16F1D22"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7508r3:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "55AE2A1C-A4FD-423B-A77E-2E24C2310A6A"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7512r3:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "C4B0D708-B426-4CA1-BE87-08BD14B7EACE"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7800r3-36p:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D19E86BF-AA91-4262-8EF9-B7FC48C6F3F8"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7800r3-48cq:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "58443CDE-33D8-4460-A861-CDC07431AA22"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7800r3k-48cq:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "64BE8C68-FE98-4162-A3D3-54494D5444F5"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7804r3:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A54F3D32-5A07-4791-90BF-96BD8A24C2F6"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:arista:7808r3:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "2F078B04-2DA0-4A4B-BB1A-408DC14CB61F"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://www.arista.com/en/support/advisories-notices/security-advisories/11999-security-advisory-59",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Exploit",
|
|
"Vendor Advisory"
|
|
]
|
|
}
|
|
]
|
|
} |