2 lines
4.8 KiB
JSON
2 lines
4.8 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["7280R3 Series with IPsec (DCS-7280SR3AK","DCS-7280SR3AM","DCS-7280CR3AK","DCS-7280CR3AM","DCS-7280CR3MK","DCS-7280DR3AK","DCS-7280DR3AM","DCS-7289R3AK-SC","DCS-7289R3AM-SC)","7800R3 Series with IPsec (7800R3A-36DM-LC","7800R3AK-36DM-LC","7800R3A-36PM-LC","7800R3AK-36PM-LC","7800R3A-36DM2-LC","7800R3AK-36DM2-LC)","AWE 7000 Series with IPsec (AWE-7250R-16S-F","AWE-7230R-4TX-4S-F","AWE-7220RP-5TH-2S-F)","AWE 5000 Series with IPsec (AWE-5510","AWE-5310)","CloudEOS VM"],"product":"EOS","vendor":"Arista Networks","versions":[{"lessThanOrEqual":"4.34.3M","status":"affected","version":"4.34.0","versionType":"custom"},{"lessThanOrEqual":"4.33.5M","status":"affected","version":"4.33.0M","versionType":"custom"},{"lessThanOrEqual":"4.32.7M","status":"affected","version":"4.32.0M","versionType":"custom"},{"lessThanOrEqual":"4.31.9M","status":"affected","version":"4.31.0M","versionType":"custom"},{"lessThan":"4.31.0","status":"affected","version":"4.30.0F","versionType":"custom"},{"lessThan":"4.30.0","status":"affected","version":"4.29.0F","versionType":"custom"},{"lessThan":"4.29.0","status":"affected","version":"4.28.0F","versionType":"custom"},{"lessThan":"4.28.0","status":"affected","version":"4.27.1F","versionType":"custom"}]}],"source":"psirt@arista.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"On affected platforms with hardware IPSec support running Arista EOS with certain IPsec features enabled, EOS may exhibit unexpected behavior in specific cases. Physical interface flaps and certain agent restarts can cause IPsec tunnel re-establishment with existing Security Associations, resulting in sequence number mismatches between tunnel endpoints potentially causing unstable communication."},{"lang":"es","value":"En plataformas afectadas con soporte de hardware IPSec que ejecutan Arista EOS con ciertas características IPsec habilitadas, EOS puede exhibir un comportamiento inesperado en casos específicos. Las fluctuaciones de interfaces físicas y ciertos reinicios de agentes pueden causar el restablecimiento de túneles IPsec con Asociaciones de Seguridad existentes, lo que resulta en desajustes de números de secuencia entre los extremos del túnel, causando potencialmente una comunicación inestable."}],"id":"CVE-2026-2379","lastModified":"2026-10-26T11:10:00.157","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":3.6,"source":"psirt@arista.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@arista.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-2379","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-06-09T14:15:34.481934Z","version":"2.0.3"}}]},"published":"2026-06-05T18:17:05.750","references":[{"source":"psirt@arista.com","url":"https://www.arista.com/en/support/advisories-notices/security-advisory/23419-security-advisory-0134"}],"sourceIdentifier":"psirt@arista.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-672"}],"source":"psirt@arista.com","type":"Secondary"}]}
|