{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-5502","assignerOrgId":"c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7","state":"PUBLISHED","assignerShortName":"Arista","dateReserved":"2023-10-10T15:58:04.589Z","datePublished":"2026-06-04T22:39:34.101Z","dateUpdated":"2026-06-05T18:30:54.241Z"},"containers":{"cna":{"providerMetadata":{"orgId":"c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7","shortName":"Arista","dateUpdated":"2026-06-04T22:39:34.101Z"},"title":"On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, a malicious supplicant may bypass authentication.","datePublic":"2024-05-21T16:00:00.000Z","problemTypes":[{"descriptions":[{"lang":"en","cweId":"CWE-287","description":"CWE-287 Improper Authentication","type":"CWE"}]}],"impacts":[{"capecId":"CAPEC-115","descriptions":[{"lang":"en","value":"CAPEC-115 Authentication Bypass"}]}],"affected":[{"vendor":"Arista Networks","product":"EOS","platforms":["7020R Series","7280R/R2 Series","7500R/R2 Series","7280E Series","7500E Series"],"versions":[{"status":"affected","version":"4.31.0","lessThanOrEqual":"4.31.0F","versionType":"custom"},{"status":"affected","version":"4.30.0","lessThanOrEqual":"4.30.4M","versionType":"custom"},{"status":"affected","version":"4.29.0","lessThanOrEqual":"4.29.6M","versionType":"custom"},{"status":"affected","version":"4.28.0","lessThanOrEqual":"4.28.8M","versionType":"custom"},{"status":"affected","version":"4.27.0","lessThanOrEqual":"4.27.11M","versionType":"custom"},{"status":"affected","version":"4.26.0","lessThanOrEqual":"4.26.11M","versionType":"custom"},{"status":"affected","version":"4.25.0","lessThanOrEqual":"4.25.11M","versionType":"custom"},{"status":"affected","version":"4.24.0","lessThanOrEqual":"4.24.11M","versionType":"custom"}],"defaultStatus":"unaffected"}],"descriptions":[{"lang":"en","value":"On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, and routing enabled on the access VLAN of the ports, a malicious supplicant may be able to bypass the requirement to perform 802.1x authentication.","supportingMedia":[{"type":"text/html","base64":false,"value":"On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, and routing enabled on the access VLAN of the ports, a malicious supplicant may be able to bypass the requirement to perform 802.1x authentication.
"}]}],"references":[{"url":"https://www.arista.com/en/support/advisories-notices/security-advisory/19462-security-advisory-0096"}],"configurations":[{"lang":"en","value":"In order to be vulnerable to CVE-2023-5502, either of the following configuration conditions must be met:\n\nCondition 1: Dot1x authentication must be configured:\n\ndot1x system-auth-control\ninterface Ethernet1\n dot1x pae authenticator\n dot1x port-control auto\n !! One of the two configuration lines below MUST be set\n dot1x host-mode single-host\n dot1x host-mode multi-host authenticated\ninterface Vlan100\n ip address 1.1.1.1/24\n ip routing\n\nCondition 2: 802.1x configured in any host mode with MBA:\n\ndot1x system-auth-control\ninterface Ethernet1\n dot1x pae authenticator\n dot1x port-control auto\n dot1x mac based authentication\n !! One of the three configuration lines below MUST be set\n dot1x host-mode single-host\n dot1x host-mode multi-host authenticated\n dot1x host-mode multi-host\ninterface Vlan100\n ip address 1.1.1.1/24\n ip routing","supportingMedia":[{"type":"text/html","base64":false,"value":"

In order to be vulnerable to CVE-2023-5502, either of the following configuration conditions must be met:

Condition 1: Dot1x authentication must be configured:

dot1x system-auth-control\ninterface Ethernet1\n dot1x pae authenticator\n dot1x port-control auto\n !! One of the two configuration lines below MUST be set\n dot1x host-mode single-host\n dot1x host-mode multi-host authenticated\ninterface Vlan100\n ip address 1.1.1.1/24\n ip routing

Condition 2: 802.1x configured in any host mode with MBA:

dot1x system-auth-control\ninterface Ethernet1\n dot1x pae authenticator\n dot1x port-control auto\n dot1x mac based authentication\n !! One of the three configuration lines below MUST be set\n dot1x host-mode single-host\n dot1x host-mode multi-host authenticated\n dot1x host-mode multi-host\ninterface Vlan100\n ip address 1.1.1.1/24\n ip routing
"}]}],"workarounds":[{"lang":"en","value":"Mitigation of this vulnerability requires disabling dot1x. Dot1x can be disabled globally using the following command:\n\nno dot1x system-auth-control","supportingMedia":[{"type":"text/html","base64":false,"value":"

Mitigation of this vulnerability requires disabling dot1x. Dot1x can be disabled globally using the following command:

no dot1x system-auth-control
"}]}],"solutions":[{"lang":"en","value":"The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Arista recommends customers move to the latest version of each release that contains all the fixes listed below.\nFor more information about upgrading see EOS User Manual: Upgrades and Downgrades https://www.arista.com/en/um-eos/eos-upgrades-and-downgrades \n\nCVE-2023-5502 has been fixed in the following releases:\n * 4.32.0F and later releases in the 4.32.x train\n * 4.31.3M and later releases in the 4.31.x train\n * 4.30.5M and later releases in the 4.30.x train\n * 4.29.7M and later releases in the 4.29.x train\n\nNote: Products 7280E and 7500E are EOL, and there are no released versions of EOS which fix the issue on those platforms.","supportingMedia":[{"type":"text/html","base64":false,"value":"

The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Arista recommends customers move to the latest version of each release that contains all the fixes listed below.
For more information about upgrading see EOS User Manual: Upgrades and Downgrades

CVE-2023-5502 has been fixed in the following releases:

Note: Products 7280E and 7500E are EOL, and there are no released versions of EOS which fix the issue on those platforms.

"}]}],"source":{"defect":["BUG 862986"],"advisory":"0096","discovery":"INTERNAL"},"x_generator":{"engine":"Vulnogram 0.5.0"},"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","subConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","subIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"HIGH","baseScore":8.2,"vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}},{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseSeverity":"MEDIUM","baseScore":5.9,"vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"}}]},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-06-05T18:30:41.122247Z","id":"CVE-2023-5502","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-06-05T18:30:54.241Z"}}]}}