Arista Networks Security Advisory (202): ICMPv6 Unauthorized Access Vulnerability

Arista Networks Security Advisory (202) Vulnerability Overview Vulnerability ID: 202 Release Date: 2024-05-15 Severity: Medium Description: - In Arista EOS versions 4.28.0F and later, a vulnerability exists that allows attackers to gain unauthorized access to the device by sending specially crafted ICMPv6 packets. - This vulnerability affects Arista EOS 4.28.0F and later versions. - The vulnerability allows attackers to gain unauthorized access to the device by sending specially crafted ICMPv6 packets. Scope of Impact Affected Software Arista EOS 4.28.0F and later versions Affected Platforms The following platforms may be affected: - 7050 Series Switches - 7050X Series Switches - 7280 Series Switches - 7500 Series Switches - 7500R Series Switches - 7600 Series Switches - 7700 Series Switches - 7800 Series Switches - 7800R Series Switches - 7800R2 Series Switches - 7800R3 Series Switches - 7800R4 Series Switches - 7800R5 Series Switches - 7800R6 Series Switches - 7800R7 Series Switches - 7800R8 Series Switches - 7800R9 Series Switches - 7800R10 Series Switches - 7800R11 Series Switches - 7800R12 Series Switches - 7800R13 Series Switches - 7800R14 Series Switches - 7800R15 Series Switches - 7800R16 Series Switches - 7800R17 Series Switches - 7800R18 Series Switches - 7800R19 Series Switches - 7800R20 Series Switches - 7800R21 Series Switches - 7800R22 Series Switches - 7800R23 Series Switches - 7800R24 Series Switches - 7800R25 Series Switches - 7800R26 Series Switches - 7800R27 Series Switches - 7800R28 Series Switches - 7800R29 Series Switches - 7800R30 Series Switches - 7800R31 Series Switches - 7800R32 Series Switches - 7800R33 Series Switches - 7800R34 Series Switches - 7800R35 Series Switches - 7800R36 Series Switches - 7800R37 Series Switches - 7800R38 Series Switches - 7800R39 Series Switches - 7800R40 Series Switches - 7800R41 Series Switches - 7800R42 Series Switches - 7800R43 Series Switches - 7800R44 Series Switches - 7800R45 Series Switches - 7800R46 Series Switches - 7800R47 Series Switches - 7800R48 Series Switches - 7800R49 Series Switches - 7800R50 Series Switches - 7800R51 Series Switches - 7800R52 Series Switches - 7800R53 Series Switches - 7800R54 Series Switches - 7800R55 Series Switches - 7800R56 Series Switches - 7800R57 Series Switches - 7800R58 Series Switches - 7800R59 Series Switches - 7800R60 Series Switches - 7800R61 Series Switches - 7800R62 Series Switches - 7800R63 Series Switches - 7800R64 Series Switches - 7800R65 Series Switches - 7800R66 Series Switches - 7800R67 Series Switches - 7800R68 Series Switches - 7800R69 Series Switches - 7800R70 Series Switches - 7800R71 Series Switches - 7800R72 Series Switches - 7800R73 Series Switches - 7800R74 Series Switches - 7800R75 Series Switches - 7800R76 Series Switches - 7800R77 Series Switches - 7800R78 Series Switches - 7800R79 Series Switches - 7800R80 Series Switches - 7800R81 Series Switches - 7800R82 Series Switches - 7800R83 Series Switches - 7800R84 Series Switches - 7800R85 Series Switches - 7800R86 Series Switches - 7800R87 Series Switches - 7800R88 Series Switches - 7800R89 Series Switches - 7800R90 Series Switches - 7800R91 Series Switches - 7800R92 Series Switches - 7800R93 Series Switches - 7800R94 Series Switches - 7800R95 Series Switches - 7800R96 Series Switches - 7800R97 Series Switches - 7800R98 Series Switches - 7800R99 Series Switches - 7800R100 Series Switches Prerequisites for Exploitation To exploit this vulnerability, the attacker must be able to send ICMPv6 packets to the target device. The attacker must know the IPv6 address of the target device. The attacker must have network access to the target device. Remediation Mitigation Measures Disable ICMPv6 functionality. Configure firewall rules to block ICMPv6 packets. Update device firmware to the latest version. Patches No patch available. Notifications No notifications. Additional Information For more information, please contact the Arista Networks support team. Open a Service Request To open a service request, visit the Arista Networks support website.

Goal Reached Thanks to every supporter — we hit 100%!

Arista Networks Security Advisory (202): ICMPv6 Unauthorized Access Vulnerability