Beveiligingsadvies

CVE-2025-2796

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-05-27 22:16:53
Laatst bijgewerkt 2025-05-28 13:34:30
Toegewezen door Arista
CVSS-score 5.3
Status PUBLISHED

Beschrijving

On affected platforms with hardware IPSec support running Arista EOS with IPsec enabled and anti-replay protection configured, EOS may exhibit unexpected behavior in specific cases. Received duplicate encrypted packets, which should be dropped under normal anti-replay protection, will instead be forwarded due to this vulnerability. Note: this issue does not affect VXLANSec or MACSec encryption functionality.