Arista’s CloudVision eXchange (CVX) server before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause a denial of service (crash and restart) in the ControllerOob agent via a malformed control-plane packet.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cloudvision_exchange | Arista | 4.21.5f (including) | 4.21.12m (excluding) |
| Cloudvision_exchange | Arista | 4.22.0 (including) | 4.22.7m (excluding) |
| Cloudvision_exchange | Arista | 4.23.0 (including) | 4.23.5m (excluding) |
| Cloudvision_exchange | Arista | 4.24.0 (including) | 4.24.2f (excluding) |