What is CVE-2020-15898?

CVE-2020-15898 is a medium-severity vulnerability in Arista 7050cx3-32s. CVSS score: 5.3/10. Published 2020-12-28.

How severe is CVE-2020-15898?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Is CVE-2020-15898 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Arista 7050cx3-32s

CVE-2020-15898

In Arista EOS malformed packets can be incorrectly forwarded across VLAN boundaries in one direction. This vulnerability is only susceptible to exploitation by unidirectional traffic (ex. UDP) and not bidirectional traffic (ex. TCP). This…

EPSS: 0.010 (58.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Arista 7050cx3-32s
Arista 7050cx3m-32s
Arista 7050qx2-32s
Arista 7050qx-32s
Arista 7050sx-128
Arista 7050sx2-128
Arista 7050sx2-72q
Arista 7050sx3-48c8
Arista 7050sx3-48yc
Arista 7050sx3-48yc12

Public proof-of-concept exploits

Cruxer8Mech/Idk
ycdxsb/WindowsPrivilegeEscalation

References

cve@mitre.org (x_refsource_CONFIRM, Exploit, Vendor Advisory)

Frequently asked questions

What is CVE-2020-15898?: CVE-2020-15898 is a medium-severity vulnerability in Arista 7050cx3-32s. CVSS score: 5.3/10. Published 2020-12-28.
How severe is CVE-2020-15898?: Medium severity. CVSS v3 base score is 5.3 out of 10.
Is CVE-2020-15898 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.