What’s Vulnerable › Vulnerabilities

CVE-2023-24510: On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-05 · updated 2026-06-17
• Weakness: CWE-755

Description

On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.

Affected products

• Arista Networks EOS: through 4.25.10m; from 4.26.0 before 4.26.10m; from 4.27.0 before 4.27.10m; from 4.28.0 before 4.28.7m; from 4.29.0 before 4.29.2f — fixed in 4.26.10m, 4.27.10m, 4.28.7m, 4.29.2f

How to fix

Upgrade to a fixed version: Arista Networks EOS 4.26.10m, 4.27.10m, 4.28.7m, 4.29.2f. Check the vendor advisory for mitigations.

References

• https://www.arista.com/en/support/advisories-notices/security-advisory/17445-security-advisory-0087
• https://www.arista.com/en/support/advisories-notices/security-advisory/17445-security-advisory-0087

Get alerted when CVE-2023-24510 or the next vulnerability affects your stack