Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2023-24548 Details

Description

On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets. The device will continue to be susceptible to the issue until remediation is in place.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:6.5 MEDIUMVector:CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CNA: [email protected]CVSS-B:5.3 MEDIUMVector:CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.arista.com/en/support/advisories-notices/security-advisory/18043-security-advisory-0089	CVE	ExploitVendor Advisory
https://www.arista.com/en/support/advisories-notices/security-advisory/18043-security-advisory-0089	[email protected]	ExploitVendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-120	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')	[email protected]
CWE-120	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')	[email protected]

Affected Products

Product	Versions
arista eos	>= 4.22.1f, <= 4.22.13m >= 4.23.0, <= 4.23.14m >= 4.24.0, <= 4.24.11m 4.25.0f
CPE cpe:2.3:o:arista:eos:::::::: cpe:2.3:o:arista:eos:4.25.0f:::::::* Remediation No remediation found in references.
arista 7280cr3-32d4	All versions
CPE cpe:2.3:h:arista:7280cr3-32d4:-:::::::* Remediation No remediation found in references.
arista 7280cr3-32p4	All versions
CPE cpe:2.3:h:arista:7280cr3-32p4:-:::::::* Remediation No remediation found in references.
arista 7280cr3-36s	All versions
CPE cpe:2.3:h:arista:7280cr3-36s:-:::::::* Remediation No remediation found in references.
arista 7280cr3-96	All versions
CPE cpe:2.3:h:arista:7280cr3-96:-:::::::* Remediation No remediation found in references.
arista 7280cr3a-24d12	All versions
CPE cpe:2.3:h:arista:7280cr3a-24d12:-:::::::* Remediation No remediation found in references.
arista 7280cr3a-48d6	All versions
CPE cpe:2.3:h:arista:7280cr3a-48d6:-:::::::* Remediation No remediation found in references.
arista 7280cr3a-72	All versions
CPE cpe:2.3:h:arista:7280cr3a-72:-:::::::* Remediation No remediation found in references.
arista 7280dr3-24	All versions
CPE cpe:2.3:h:arista:7280dr3-24:-:::::::* Remediation No remediation found in references.
arista 7280dr3a-36	All versions
CPE cpe:2.3:h:arista:7280dr3a-36:-:::::::* Remediation No remediation found in references.
arista 7280dr3a-54	All versions
CPE cpe:2.3:h:arista:7280dr3a-54:-:::::::* Remediation No remediation found in references.
arista 7280dr3ak-36	All versions
CPE cpe:2.3:h:arista:7280dr3ak-36:-:::::::* Remediation No remediation found in references.
arista 7280dr3ak-54	All versions
CPE cpe:2.3:h:arista:7280dr3ak-54:-:::::::* Remediation No remediation found in references.
arista 7280dr3am-36	All versions
CPE cpe:2.3:h:arista:7280dr3am-36:-:::::::* Remediation No remediation found in references.
arista 7280dr3am-54	All versions
CPE cpe:2.3:h:arista:7280dr3am-54:-:::::::* Remediation No remediation found in references.
arista 7280pr3-24	All versions
CPE cpe:2.3:h:arista:7280pr3-24:-:::::::* Remediation No remediation found in references.
arista 7280r3	All versions
CPE cpe:2.3:h:arista:7280r3:-:::::::* Remediation No remediation found in references.
arista 7280sr3-40yc6	All versions
CPE cpe:2.3:h:arista:7280sr3-40yc6:-:::::::* Remediation No remediation found in references.
arista 7280sr3-48yc8	All versions
CPE cpe:2.3:h:arista:7280sr3-48yc8:-:::::::* Remediation No remediation found in references.
arista 7280tr3-40c6	All versions
CPE cpe:2.3:h:arista:7280tr3-40c6:-:::::::* Remediation No remediation found in references.
arista 7500r3-24d	All versions
CPE cpe:2.3:h:arista:7500r3-24d:-:::::::* Remediation No remediation found in references.
arista 7500r3-24p	All versions
CPE cpe:2.3:h:arista:7500r3-24p:-:::::::* Remediation No remediation found in references.
arista 7500r3-36cq	All versions
CPE cpe:2.3:h:arista:7500r3-36cq:-:::::::* Remediation No remediation found in references.
arista 7500r3k-36cq	All versions
CPE cpe:2.3:h:arista:7500r3k-36cq:-:::::::* Remediation No remediation found in references.
arista 7500r3k-48y4d	All versions
CPE cpe:2.3:h:arista:7500r3k-48y4d:-:::::::* Remediation No remediation found in references.
arista 7504r3	All versions
CPE cpe:2.3:h:arista:7504r3:-:::::::* Remediation No remediation found in references.
arista 7508r3	All versions
CPE cpe:2.3:h:arista:7508r3:-:::::::* Remediation No remediation found in references.
arista 7512r3	All versions
CPE cpe:2.3:h:arista:7512r3:-:::::::* Remediation No remediation found in references.
arista 7800r3-36d	All versions
CPE cpe:2.3:h:arista:7800r3-36d:-:::::::* Remediation No remediation found in references.
arista 7800r3-36p	All versions
CPE cpe:2.3:h:arista:7800r3-36p:-:::::::* Remediation No remediation found in references.
arista 7800r3-48cq	All versions
CPE cpe:2.3:h:arista:7800r3-48cq:-:::::::* Remediation No remediation found in references.
arista 7800r3a-36d	All versions
CPE cpe:2.3:h:arista:7800r3a-36d:-:::::::* Remediation No remediation found in references.
arista 7800r3a-36dm	All versions
CPE cpe:2.3:h:arista:7800r3a-36dm:-:::::::* Remediation No remediation found in references.
arista 7800r3a-36p	All versions
CPE cpe:2.3:h:arista:7800r3a-36p:-:::::::* Remediation No remediation found in references.
arista 7800r3a-36pm	All versions
CPE cpe:2.3:h:arista:7800r3a-36pm:-:::::::* Remediation No remediation found in references.
arista 7800r3ak-36dm	All versions
CPE cpe:2.3:h:arista:7800r3ak-36dm:-:::::::* Remediation No remediation found in references.
arista 7800r3ak-36pm	All versions
CPE cpe:2.3:h:arista:7800r3ak-36pm:-:::::::* Remediation No remediation found in references.
arista 7800r3k-36dm	All versions
CPE cpe:2.3:h:arista:7800r3k-36dm:-:::::::* Remediation No remediation found in references.
arista 7800r3k-48cq	All versions
CPE cpe:2.3:h:arista:7800r3k-48cq:-:::::::* Remediation No remediation found in references.
arista 7800r3k-48cqms	All versions
CPE cpe:2.3:h:arista:7800r3k-48cqms:-:::::::* Remediation No remediation found in references.
arista 7800r3k-72y7512r3	All versions
CPE cpe:2.3:h:arista:7800r3k-72y7512r3:-:::::::* Remediation No remediation found in references.
arista 7808r3	All versions
CPE cpe:2.3:h:arista:7808r3:-:::::::* Remediation No remediation found in references.
arista 7812r3	All versions
CPE cpe:2.3:h:arista:7812r3:-:::::::* Remediation No remediation found in references.
arista 7816r3	All versions
CPE cpe:2.3:h:arista:7816r3:-:::::::* Remediation No remediation found in references.

Change History

5 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Sep 5, 2023	Initial Analysis	[email protected]

CVE-2023-24548 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation