dot1x vulnerabilities

An authenticated supplicant on an adjacent network may bypass the intended network authorization policy and send unrestricted traffic during a brief window (milliseconds to seconds) between the completion of authentication and full enforcement of its assigned ACL.

A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued. This may lead to incorrect enforcement of access policy.

A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window, the supplicant's traffic may pass without ACL enforcement.