PT-2025-23040 · Arista · Arista Eos

Published 2025-05-27 · Updated 2025-05-28 · CVE-2025-2796

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Arista EOS (affected versions not specified)

Description The issue affects Arista EOS with IPsec enabled and anti-replay protection configured on platforms with hardware IPSec support. In specific cases, EOS may exhibit unexpected behavior, where received duplicate encrypted packets are forwarded instead of being dropped. This does not affect VXLANSec or MACSec encryption functionality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2025-2796

Affected Products

Arista Eos

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-2796 · Security Note
• https://twitter.com/CVEnew/status/1927497857013039179 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1927514471976566879 · Twitter Post
• https://arista.com/en/support/advisories-notices/security-advisory/21413-security-advisory-0119 · Note
• https://t.me/cvetracker/24780 · Telegram Post