← Back

CVE-2020-24360

nvd nist
Published: Dec 28, 2020Modified: Jun 17, 2026

JSON object

Loading...
7.4
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 4.0
Source: NVD

Description

An issue with ARP packets in Arista’s EOS affecting the 7800R3, 7500R3, and 7280R3 series of products may result in issues that cause a kernel crash, followed by a device reload. The affected Arista EOS versions are: 4.24.2.4F and below releases in the 4.24.x train; 4.23.4M and below releases in the 4.23.x train; 4.22.6M and below releases in the 4.22.x train.

Affected (3)

Products: Arista: Eos
Arista
1 product
Eos
Configuration A
3 vulnerable · 26 platform
Vulnerable SoftwareAffected Versions
Arista
Eos
From 4.22.0f to 4.22.6m
Eos
From 4.23.0f to 4.23.4m
Eos
From 4.24.0f to 4.24.2.4f
Running on/withPlatform Versions
Arista
7280cr2ak 30
All versions
Arista
7280cr2k 60
All versions
Arista
7280cr3 32d4
All versions
Arista
7280cr3 32p4
All versions
Arista
7280cr3 96
All versions
Arista
7280cr3k 32d4
All versions
Arista
7280cr3k 32p4
All versions
Arista
7280cr3k 96
All versions
Arista
7280dr3 24
All versions
Arista
7280dr3k 24
All versions
Arista
7280pr3 24
All versions
Arista
7280pr3k 24
All versions
Arista
7280sr3 48yc8
All versions
Arista
7280sr3k 48yc8
All versions
Arista
7500r3 24d
All versions
Arista
7500r3 24p
All versions
Arista
7500r3 36cq
All versions
Arista
7500r3k 36cq
All versions
Arista
7504r3
All versions
Arista
7508r3
All versions
Arista
7512r3
All versions
Arista
7800r3 36p
All versions
Arista
7800r3 48cq
All versions
Arista
7800r3k 48cq
All versions
Arista
7804r3
All versions
Arista
7808r3
All versions

Related CWEs

CWE-404
Improper Resource Shutdown or Release
The product does not release or incorrectly releases a resource before it is made available for re-use.

References (2)

Source: cve@mitre.org
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitVendor Advisory

Timeline

No history available yet.