vulnerability
security-advisory-0103
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:A/AC:L/Au:N/C:N/I:C/A:N) | Jul 23, 2024 | Sep 4, 2024 | Apr 29, 2025 |
Severity
6
CVSS
(AV:A/AC:L/Au:N/C:N/I:C/A:N)
Published
Jul 23, 2024
Added
Sep 4, 2024
Modified
Apr 29, 2025
Description
In Arista's EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN. This issue was discovered internally and Arista is not aware of any malicious uses of this issue in customer networks.
Solution
upgrade-solution-CVE-2024-6858
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.