Paper/Archive/CVE-2024-12378

CVE-2024-12378

Arista Networks CloudVision Portal — On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear.

EPSS 0.5%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (CNA)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 42.9.429 × 208.6 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear.

Affected

ProductAffectedFixed inSource

CloudVision Portal4.32.0 – 4.32.2F–CNA

CloudVision Portal4.31.0 – 4.31.6M–CNA

CloudVision Portal4.30.0 – 4.30.8M–CNA

CloudVision Portal4.29.0 – 4.29.9M–CNA

CloudVision Portal4.28.0 – 4.28.12M–CNA

CloudVision Portal4.27.0 – 4.27.12M–CNA

Scores by source

Arista (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refarista.com/en/support/advisories-notices/security-advisory/21289-security-advisory-0113