CVE-2023-5502
BaseFortify
Publication date: 2026-06-04
Last updated on: 2026-06-04
Assigner: Arista Networks, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-287 | When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability affects Arista EOS platforms that have 802.1x authentication configured on access or trunk ports, with routing enabled on the access VLAN of those ports. A malicious supplicant (an unauthorized device or user) may be able to bypass the requirement to perform 802.1x authentication, potentially gaining unauthorized network access.
How can this vulnerability impact me? :
The impact of this vulnerability is that an attacker could bypass 802.1x authentication controls, which are typically used to restrict network access to authorized devices only. This could allow unauthorized devices to connect to the network, potentially leading to unauthorized access, data interception, or other malicious activities.