CoreCVE
Back

MEDIUM

On affected platforms running Arista EOS with 802.1X configured, certain conditions may occur where a dynamic ACL is received from the AAA server resulting in only the first line of the ACL being installed after an Accelerated Software Upgrade (ASU) restar

Published Mar 4, 2025

Description

On affected platforms running Arista EOS with 802.1X configured, certain conditions may occur where a dynamic ACL is received from the AAA server resulting in only the first line of the ACL being installed after an Accelerated Software Upgrade (ASU) restart.

Note: supplicants with pending captive-portal authentication during ASU would be impacted with this bug.

Affected products

Remediation

Vendor solution

The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Arista recommends customers move to the latest version of each release that contains all the fixes listed below. For more information about upgrading see EOS User Manual: Upgrades and Downgrades https://www.arista.com/en/um-eos/eos-upgrades-and-downgrades .

CVE-2024-8000 has been fixed in the following releases:

* 4.33.0M and above * 4.32.5M and above releases in the 4.32.x train * 4.31.6M and above releases in the 4.31.x train * 4.30.9M and above releases in the 4.30.x train

Weaknesses (1)

CWE-1284

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner Arista
Published Mar 4, 2025
Updated Mar 4, 2025
Reserved Aug 19, 2024
Link CVE-2024-8000

CISA Vulnrichment

Updated Mar 4, 2025

NVD

Status Deferred
Modified Jun 17, 2026
Link CVE-2024-8000

Red Hat

No data

ENISA EUVD

Assigner Arista
Published Mar 4, 2025
Updated Mar 4, 2025
Link EUVD-2024-54121

GitHub

No data