Security Advisory 0057
Description
This advisory documents a vulnerability in Arista's EOS involving crossing VLAN boundaries in X-series platforms. In EVPN VxLAN setups, specific malformed packets can lead to incorrect MAC to IP bindings, resulting in packets being incorrectly forwarded across VLAN boundaries. This can cause traffic to be discarded on the receiving VLAN. The issue was discovered internally and Arista is not aware of any malicious uses in customer networks.
Solution(s)
- upgrade-solution-CVE-2020-26569
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center