CVE-2020-13100

Published: Oct 26, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Arista’s CloudVision eXchange (CVX) server before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause a denial of service (crash and restart) in the ControllerOob agent via a malformed control-plane packet.

Affected (4)

Products: Arista: Cloudvision Exchange

Arista

1 product

Cloudvision Exchange

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Arista Cloudvision Exchange	From 4.21.5f to 4.21.12m
Arista Cloudvision Exchange	From 4.22.0 to 4.22.7m
Arista Cloudvision Exchange	From 4.23.0 to 4.23.5m
Arista Cloudvision Exchange	From 4.24.0 to 4.24.2f

References (2)

https://www.arista.com/en/support/advisories-notices/security-advisories/11758-security-advisory-52

Source: cve@mitre.org

ExploitVendor Advisory

https://www.arista.com/en/support/advisories-notices/security-advisories/11758-security-advisory-52

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

Timeline

No history available yet.