PT-2026-46407 · Arista Networks · Eos

Published 2026-06-04 · Updated 2026-06-04 · CVE-2025-8873

Mitre

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

On affected platforms running Arista EOS with IPsec configured, a specially crafted packet can cause the dataplane to stop processing all IPsec traffic. The control plane may detect this condition, and attempt to reset the IPsec processing pipeline. After reset traffic may not resume being processed. There is no impact to non-IPsec traffic or to IPsec traffic not originating or terminating on the system. This issue was reported by an Arista customer.

Fix

Weakness Enumeration

CWE-1286

Related Identifiers

CVE-2025-8873

Affected Products

Eos

References · 2

• https://arista.com/en/support/advisories-notices/security-advisory/22869-security-advisory-0127 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8873 · Security Note