CVE-2020-15898

MEDIUM

5.3

CVSS Score

Published: December 28, 2020 at 06:16 PM UTC

Updated: June 17, 2026 at 02:57 AM UTC

49 products affected across 1 vendorEos7050Tx3-48C87050Cx3M-32S

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.3

Exploit prediction

EPSS 1.0%

Description

In Arista EOS malformed packets can be incorrectly forwarded across VLAN boundaries in one direction. This vulnerability is only susceptible to exploitation by unidirectional traffic (ex. UDP) and not bidirectional traffic (ex. TCP). This affects: EOS 7170 platforms version 4.21.4.1F and below releases in the 4.21.x train; EOS X-Series versions 4.21.11M and below releases in the 4.21.x train; 4.22.6M and below releases in the 4.22.x train; 4.23.4M and below releases in the 4.23.x train; 4.24.2.1F and below releases in the 4.24.x train.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Eos · Arista

95%

4.21.0f ≤ v ≤ 4.21.11m4.21.0f ≤ v ≤ 4.21.4.1f4.22.0f ≤ v ≤ 4.22.6m4.23.0f ≤ v ≤ 4.23.4m4.24.0f ≤ v ≤ 4.24.2.1f

arista-7050cx3-32s (environment) · arista-7050cx3m-32s (environment) · arista-7050qx-32s (environment) · arista-7050qx2-32s (environment) · arista-7050sx-128 (environment) · arista-7050sx-64 (environment) · arista-7050sx-72q (environment) · arista-7050sx2-128 (environment) · arista-7050sx2-72q (environment) · arista-7050sx3-48c8 (environment) · arista-7050sx3-48yc (environment) · arista-7050sx3-48yc12 (environment) · arista-7050sx3-48yc8 (environment) · arista-7050sx3-96yc8 (environment) · arista-7050tx-48 (environment) · arista-7050tx-64 (environment) · arista-7050tx-72q (environment) · arista-7050tx2-128 (environment) · arista-7050tx3-48c8 (environment) · arista-7060cx-32s (environment) · arista-7060cx2-32s (environment) · arista-7060dx4-32 (environment) · arista-7060px4-32 (environment) · arista-7060sx2-48yc6 (environment) · arista-7170-32c (environment) · arista-7170-32cd (environment) · arista-7170-64c (environment) · arista-720xp-24y6 (environment) · arista-720xp-24zy4 (environment) · arista-720xp-48y6 (environment) · arista-720xp-48zc2 (environment) · arista-720xp-96zc2 (environment) · arista-7250qx-64 (environment) · arista-7260cx (environment) · arista-7260cx3 (environment) · arista-7260cx3-64 (environment) · arista-7260qx (environment) · arista-7300x-32q (environment) · arista-7300x-64s (environment) · arista-7300x-64t (environment) · arista-7300x3-32c (environment) · arista-7300x3-48yc4 (environment) · arista-7304x3 (environment) · arista-7308x3 (environment) · arista-7320x-32c (environment) · arista-7324x (environment) · arista-7328x (environment) · arista-7368x4 (environment)

7050Cx3-32S · Aristadevice

80%

All versions

7050Cx3M-32S · Aristadevice

80%

All versions

7050Qx-32S · Aristadevice

80%

All versions

7050Qx2-32S · Aristadevice

80%

All versions