CVE-2020-11622: High severity arista cloudeos vulnerability
A vulnerability exists in Arista’s Cloud EOS VM / vEOS 4.23.2M and below releases in the 4.23.x train, 4.22.4M and below releases in the 4.22.x train, 4.21.3M to 4.21.9M releases in the 4.21.x train, 4.21.3FX-7368., 4.21.4-FCRFX., 4.21.4.1, 4.21.7.1, 4.22.2.0.1, 4.22.2.2.1, 4.22.3.1, and 4.23.2.1 Router code in a scenario where TCP MSS options are configured.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-11622.
What is the severity of CVE-2020-11622?
The severity of CVE-2020-11622 is high with a severity value of 7.5.
Which products are affected by CVE-2020-11622?
The products affected by CVE-2020-11622 are Arista's Cloud EOS VM / vEOS versions 4.23.2M and below, 4.22.4M and below, and 4.21.3M to 4.21.9M, as well as specific versions of 4.21.3FX-7368.*, 4.21.4-FCRFX.*, 4.21.4.1, 4.21.7.1, 4.22.2.0.1, 4.22.2.2.1, 4.22.3.1, and 4.23.2.1.
What is the official advisory page for this vulnerability?
The official advisory page for this vulnerability can be found at [https://www.arista.com/en/support/advisories-notices](https://www.arista.com/en/support/advisories-notices).
Where can I find more information about this vulnerability?
More information about this vulnerability can be found at [https://www.arista.com/en/support/advisories-notices/security-advisories/11195-security-advisory-49](https://www.arista.com/en/support/advisories-notices/security-advisories/11195-security-advisory-49).