PT-2026-46396 · Arista Networks · Eos

Published 2026-06-04 · Updated 2026-06-04 · CVE-2024-27891

Mitre

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports. This can cause outgoing packets to incorrectly be allowed or denied.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2024-27891

Affected Products

Eos

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2024-27891 · Security Note
• https://arista.com/en/support/advisories-notices/security-advisory/19908-security-advisory-0102 · Note