💣Exploit CVE-2024-6437 - Arista EOS Traffic Policy Redirect Bypass Vulnerability

[Maksim]

CVE ID : CVE-2024-6437
Published : Jan. 10, 2025, 8:15 p.m. | 23 minutes ago
Description : On affected platforms running Arista EOS with one of the following features configured to redirect IP traffic to a next hop: policy-based routing (PBR), BGP Flowspec, or interface traffic policy -- certain IP traffic such as IPv4 packets with IP options may bypass the feature's set nexthop action and be slow-path forwarded (FIB routed) by the kernel as the packets are trapped to the CPU instead of following the redirect action's destination.
Severity: 5.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.