CVE-2023-3646

Published: Aug 29, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

On affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel panic and cause system reload.

Affected (2)

Products: Arista: Eos

Arista

1 product

Eos

Configuration A

2 vulnerable · 46 platform

Vulnerable Software	Affected Versions
Arista Eos	From 4.28.2f to 4.28.5.1m
Arista Eos	From 4.29.0 to 4.29.2f

Running on/with	Platform Versions
Arista 7280cr3 32d4	All versions
Arista 7280cr3 32p4	All versions
Arista 7280cr3 36s	All versions
Arista 7280cr3 96	All versions
Arista 7280cr3a 24d12	All versions
Arista 7280cr3a 48d6	All versions
Arista 7280cr3a 72	All versions
Arista 7280dr3 24	All versions
Arista 7280dr3a 36	All versions
Arista 7280dr3a 54	All versions
Arista 7280dr3ak 36	All versions
Arista 7280dr3ak 54	All versions
Arista 7280dr3am 36	All versions
Arista 7280dr3am 54	All versions
Arista 7280pr3 24	All versions
Arista 7280r3	All versions
Arista 7280sr3 40yc6	All versions
Arista 7280sr3 48yc8	All versions
Arista 7280tr3 40c6	All versions
Arista 7289r3a Sc	All versions
Arista 7289r3ak Sc	All versions
Arista 7289r3am Sc	All versions
Arista 7500r3 24d	All versions
Arista 7500r3 24p	All versions
Arista 7500r3 36cq	All versions
Arista 7500r3k 36cq	All versions
Arista 7500r3k 48y4d	All versions
Arista 7504r3	All versions
Arista 7508r3	All versions
Arista 7512r3	All versions
Arista 7800r3 36d	All versions
Arista 7800r3 36p	All versions
Arista 7800r3 48cq	All versions
Arista 7800r3a 36d	All versions
Arista 7800r3a 36dm	All versions
Arista 7800r3a 36p	All versions
Arista 7800r3a 36pm	All versions
Arista 7800r3ak 36dm	All versions
Arista 7800r3ak 36pm	All versions
Arista 7800r3k 36dm	All versions
Arista 7800r3k 48cq	All versions
Arista 7800r3k 48cqms	All versions
Arista 7800r3k 72y7512r3	All versions
Arista 7808r3	All versions
Arista 7812r3	All versions
Arista 7816r3	All versions

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

https://www.arista.com/en/support/advisories-notices/security-advisory/18042-security-advisory-0088

Source: psirt@arista.com

ExploitMitigationVendor Advisory

https://www.arista.com/en/support/advisories-notices/security-advisory/18042-security-advisory-0088

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMitigationVendor Advisory

Timeline

No history available yet.