CVE-2020-11622

Published: Jun 10, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A vulnerability exists in Arista’s Cloud EOS VM / vEOS 4.23.2M and below releases in the 4.23.x train, 4.22.4M and below releases in the 4.22.x train, 4.21.3M to 4.21.9M releases in the 4.21.x train, 4.21.3FX-7368.*, 4.21.4-FCRFX.*, 4.21.4.1, 4.21.7.1, 4.22.2.0.1, 4.22.2.2.1, 4.22.3.1, and 4.23.2.1 Router code in a scenario where TCP MSS options are configured.

Affected (22)

Products: Arista: Cloudeos, Veos

Arista

2 products

Cloudeos

Veos

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Arista Cloudeos	From 4.21.3m to 4.21.9m
Arista Cloudeos	From 4.22.0 to 4.22.4m
Arista Cloudeos	From 4.23.0 to 4.23.2m
Arista Cloudeos	Version 4.21.3fx-7368
Arista Cloudeos	Version 4.21.4-fcrfx
Arista Cloudeos	Version 4.21.4.1
Arista Cloudeos	Version 4.21.7.1
Arista Cloudeos	Version 4.22.2.0.1
Arista Cloudeos	Version 4.22.2.2.1
Arista Cloudeos	Version 4.22.3.1
Arista Cloudeos	Version 4.23.2.1
Arista Veos	From 4.21.3m to 4.21.9m
Arista Veos	From 4.22.0 to 4.22.4m
Arista Veos	From 4.23.0 to 4.23.2m
Arista Veos	Version 4.21.3fx-7368
Arista Veos	Version 4.21.4-fcrfx
Arista Veos	Version 4.21.4.1
Arista Veos	Version 4.21.7.1
Arista Veos	Version 4.22.2.0.1
Arista Veos	Version 4.22.2.2.1
Arista Veos	Version 4.22.3.1
Arista Veos	Version 4.23.2.1

References (4)

https://www.arista.com/en/support/advisories-notices

Source: cve@mitre.org

Vendor Advisory

https://www.arista.com/en/support/advisories-notices/security-advisories/11195-security-advisory-49

Source: cve@mitre.org

MitigationVendor Advisory

https://www.arista.com/en/support/advisories-notices

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.arista.com/en/support/advisories-notices/security-advisories/11195-security-advisory-49

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationVendor Advisory

Timeline

No history available yet.