CVE-2024-11185: Arista Networks Eos

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

On affected platforms running Arista EOS, ingress traffic on Layer 2 ports may, under certain conditions, be improperly forwarded to ports associated with different VLANs, resulting in a breach of VLAN isolation and segmentation boundaries.

Affected products

• Arista Networks Eos: from 4.29.0, up to and including 4.29.10M; from 4.30.0, up to and including 4.30.9M; from 4.31.0, up to and including 4.31.6M; from 4.32.0, up to and including 4.32.3M; from 4.33.0, up to and including 4.33.1F

Published 2025-05-27. Last modified 2026-06-17.