« Volver al listado

CVE-2016-6894

Estado: ModificadaAlta (7.5)—

Arista EOS 4.15 before 4.15.8M, 4.16 before 4.16.7M, and 4.17 before 4.17.0F on DCS-7050 series devices allow remote attackers to cause a denial of service (device reboot) by sending crafted packets to the control plane.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Arista — Dcs-7050q EOS SoftwareArista — Dcs-7050s EOS SoftwareArista — Dcs-7050t EOS Software

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2016-6894",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": true,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-01-04T21:59:00.137",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/95267",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1752-security-advisory-25",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/95267",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1752-security-advisory-25",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Arista EOS 4.15 before 4.15.8M, 4.16 before 4.16.7M, and 4.17 before 4.17.0F on DCS-7050 series devices allow remote attackers to cause a denial of service (device reboot) by sending crafted packets to the control plane."
    },
    {
      "lang": "es",
      "value": "Arista EOS 4.15 en versiones anteriores a 4.15.8M, 4.16 en versiones anteriores a 4.16.7M y 4.17 en versiones anteriores a 4.17.0F en dispositivos de la serie DCS-7050 permiten a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) enviando paquetes manipulados al plano de control."
    }
  ],
  "lastModified": "2026-06-17T00:51:57.060",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arista:dcs-7050t_eos_software:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EAFB7AD4-267C-4D33-8941-E66D41F3E7F2",
              "versionEndIncluding": "4.15"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arista:dcs-7050t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8A7AE249-7B7D-44A9-9ACD-97BDD55574D3"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arista:dcs-7050q_eos_software:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "32B8D0F1-8761-4F7E-8528-C0ED4A8A8AB4",
              "versionEndIncluding": "4.15"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arista:dcs-7050q:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8BF337B4-E1C4-4FF6-B6EB-7B8619804C87"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arista:dcs-7050s_eos_software:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "523C79AB-C3AA-4D38-9D7A-912EB814D7CD",
              "versionEndIncluding": "4.15"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arista:dcs-7050s:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DBDA1586-45F7-46EE-9DF6-44A60F4F5C84"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}