Race Condition in Arista EOS Supplicant After Clear Command

Executive Summary

This vulnerability involves a race condition in network authentication where a supplicant (a device seeking network access) may incorrectly remain in an authorized state even after a command to clear all authorized hosts is issued. This could allow unauthorized devices to maintain network access unintentionally.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability involves a race condition in 802.1X authentication. Detection requires monitoring supplicant states during deauthentication. Check logs for supplicants remaining authorized after 'clear dot1x host all' commands. Use network monitoring tools to track unexpected authorized states.

Useful 0 Not Useful 0

Impact Analysis

The impact is limited due to the low CVSS scores. An attacker in a nearby network position might exploit this to maintain unauthorized network access briefly, but the window for exploitation is small and requires specific timing conditions.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability is unlikely to significantly impact compliance with standards like GDPR or HIPAA due to its low severity and limited potential for exploitation. However, organizations should still address it to ensure robust network access controls.

Useful 0 Not Useful 0

Mitigation Strategies

Implement network monitoring to detect unauthorized supplicant states after clear dot1x host all commands. Review and update 802.1X authentication policies to ensure proper state management.

Useful 0 Not Useful 0