We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2025-2796

On affected platforms with hardware IPSec support running Arista EOS with IPsec enabled and anti-replay protection configured, EOS may exhibit unexpected behavior in specific cases. Received duplicate encrypted packets, which should be dropped under normal



Description

On affected platforms with hardware IPSec support running Arista EOS with IPsec enabled and anti-replay protection configured, EOS may exhibit unexpected behavior in specific cases. Received duplicate encrypted packets, which should be dropped under normal anti-replay protection, will instead be forwarded due to this vulnerability. Note: this issue does not affect VXLANSec or MACSec encryption functionality.

Reserved 2025-03-25 | Published 2025-05-27 | Updated 2025-05-28 | Assigner Arista


MEDIUM: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Problem types

cwe-284

Product status

Default status
unaffected

4.33.0
affected

References

www.arista.com/...rity-advisory/21413-security-advisory-0119

cve.org (CVE-2025-2796)

nvd.nist.gov (CVE-2025-2796)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2025-2796

Support options

Helpdesk Chat, Email, Knowledgebase