CVE-2024-8000: Arista Networks Eos

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

On affected platforms running Arista EOS with 802.1X configured, certain conditions may occur where a dynamic ACL is received from the AAA server resulting in only the first line of the ACL being installed after an Accelerated Software Upgrade (ASU) restart. Note: supplicants with pending captive-portal authentication during ASU would be impacted with this bug.

Affected products

• Arista Networks Eos: from 4.32.0, up to and including 4.32.4M; from 4.31.0, up to and including 4.31.5M; from 4.30.0, up to and including 4.30.8M

Published 2025-03-04. Last modified 2026-06-17.