Arista Updates
2639Warning Date
Severity Level
Warning Number
Target Sector
8 October, 2020
● High
2020-1893
All
Description:
Arista has released security update to address multiple vulnerabilities in the following products:
- EOS
- 4.24.1F and below release in the 4.24.x train.
- 4.23.4M and below releases in the 4.23.x train.
- 4.22.6M and below releases in the 4.22.x train.
- 4.21.10M and below releases in the 4.21.x train.
- All releases in the 4.20.x train
- CloudVision eXchange VM/Appliance:
- 4.24.1.1F and below release in the 4.24.x train.
- 4.23.4M and below releases in the 4.23.x train.
- 4.22.6M and below releases in the 4.22.x train.
- 4.21.5F to 4.21.10M releases in the 4.21.x train.
Threats:
The vulnerability cause the following:
- Execute arbitrary code .
- Application crash.
Best practice and Recommendations:
The CERT team encourages users to review Arista security advisory and apply the necessary updates: