CVE-2023-5502
CWE-287Published: June 4, 2026· Updated: Jun 5, 2026
Official Description
On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, and routing enabled on the access VLAN of the ports, a malicious supplicant may be able to bypass the requirement to perform 802.1x authentication.
Technical Analysis
CVE-2023-5502 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.
The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.
A successful exploit results in full integrity compromise (data manipulation), with a CVSS base score of 5.9.
From a weakness classification perspective (CWE-287): Authentication bypass vulnerabilities allow attackers to access protected resources without valid credentials.
CVSS v3.1 Vector Breakdown
Exploit & PoC Resources
All References (1)
Quick Facts
Related CVEs (CWE-287)
Recommended Actions
- →Apply vendor patches immediately
- →Monitor CVE-2023-5502 in threat intel feeds
- →Review IDS/IPS signatures for exploitation attempts