What’s Vulnerable › Vulnerabilities

CVE-2023-6068: On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of the configured ACL for a port resulting in some packets that should be denied being permitted and some

• Severity: low (CVSS 3.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-03-04 · updated 2026-06-17
• Weakness: CWE-283

Description

On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of the configured ACL for a port resulting in some packets that should be denied being permitted and some

Affected products

• Arista Multiaccess: from 1.6.0 before 1.7.0; 1.7.1 — fixed in 1.7.0

How to fix

Upgrade to a fixed version: Arista Multiaccess 1.7.0. Check the vendor advisory for mitigations.

References

• https://www.arista.com/en/support/advisories-notices/security-advisory/19023-security-advisory-0091
• https://www.arista.com/en/support/advisories-notices/security-advisory/19023-security-advisory-0091

Get alerted when CVE-2023-6068 or the next vulnerability affects your stack