PT-2026-1501 · Arista · Arista Eos

Published 2026-01-06 · Updated 2026-01-06 · CVE-2025-7048

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Arista EOS (affected versions not specified)

Description A specially crafted packet can cause the MACsec process to terminate unexpectedly on affected platforms running Arista EOS with MACsec configuration. Continuous receipt of these packets with certain MACsec configurations can cause longer term disruption of dataplane traffic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-805

Related Identifiers

CVE-2025-7048

Affected Products

Arista Eos

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-7048 · Security Note
• https://arista.com/en/support/advisories-notices/security-advisory/23120-security-advisory-0132 · Note
• https://twitter.com/CVEnew/status/2008622612851863733 · Twitter Post
• https://t.me/CVEtracker/41521 · Telegram Post