CVE-2018-14008

EUVD-2018-5940
Arista EOS through 4.21.0F allows a crash because 802.1x authentication is mishandled.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
ADJACENT_NETWORK
LOW
NONE
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 39%
Affected Products (NVD)
VendorProductVersion
aristaeos
𝑥
≤ 4.21.0f
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.arista.com/en/support/advisories-notices
https://www.arista.com/en/support/advisories-notices/security-advisories/6072-security-advisory-38
https://www.arista.com/en/support/advisories-notices
https://www.arista.com/en/support/advisories-notices/security-advisories/6072-security-advisory-38