Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass
Priority CRITICAL 90Exploited in the wildCWE-1023Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- None · Low · None
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interface—is present, the switch will incorrectly decapsulate and forward other unexpected tunneled packet with a destination IP matching its configured decapsulation IP. This occurs because the switch does not verify the tunnel protocol type, potentially leading to the unexpected processing of non-configured tunnel traffic. This issue has been reported as being exploited in the wild.
Why it matters now
Exploitation Active In CISA KEV since 2026-06-09CISA due date 2026-06-23
EPSS 0.01108 66th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Arista | EOS | 4.36.0 and later; 4.35.0 – 4.35; 4.34.0 – 4.34; 4.33.0 – 4.33; 4.32.0 – 4.32; 4.31.0 – 4.31; up to 4.30 | — | No fix listed | CNA |
- EOS VendorArista Affected 4.36.0 and later; 4.35.0 – 4.35; 4.34.0 – 4.34; 4.33.0 – 4.33; 4.32.0 – 4.32; 4.31.0 – 4.31; up to 4.30 Fixed in — No fix listed CNA
CPE configurations NVD · 102
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:* | all versions | Vulnerable | Arista |
| cpe:2.3:h:arista:7020sr-24c2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7020sr-32c2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7020srg-24c2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7020tr-48:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7020tra-48:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280cr-48:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280cr2-60:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280cr2a-30:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280cr2a-60:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
- cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Arista
- cpe:2.3:h:arista:7020sr-24c2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7020sr-32c2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7020srg-24c2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7020tr-48:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7020tra-48:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280cr-48:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280cr2-60:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280cr2a-30:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280cr2a-60:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
Show 92 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:arista:7280cr2k-30:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280cr2k-60:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280cr2m-30:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280cr3-32d4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280cr3-32p4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280cr3-36s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280cr3-96:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280cr3a-24d12:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280cr3a-48d6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280cr3a-72:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280cr3ak-24d12:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280cr3ak-48d6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280cr3ak-72:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280cr3am-24d12:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280cr3am-48d6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280cr3am-72:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280cr3mk-32d4s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280cr3mk-32p4s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280dr3-24:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280dr3a-36:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280dr3a-54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280dr3ak-36:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280dr3ak-54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280dr3am-36:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280dr3am-54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280pr3-24:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280qr-c36:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280qr-c36-m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280qr-c72:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280qra-c36s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280qra-c36sm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280sr-48c6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280sr2-48yc6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280sr2-48yc6-m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280sr2a-48yc6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280sr2a-48yc6-m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280sr2k-48c6-m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280sr3-40yc6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280sr3-48yc8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280sr3m-48yc8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280sra-48c6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280sra-48c6-m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280sram-48c6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280srm-40cx2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280tr-48c6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280tr3-40c6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280tra-48c6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7280tra-48c6-m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7289r3a-sc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7289r3ak-sc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7289r3am-sc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7500r-36cq-lc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7500r-36q-lc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7500r-48s2cq-lc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7500r-8cfpx-lc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7500r2-36cq-lc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7500r2a-36cq-lc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7500r2ak-36cq-lc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7500r2ak-48ycq-lc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7500r2am-36cq-lc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7500r2m-36cq-lc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7500r3-24d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7500r3-24p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7500r3-36cq:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7500r3k-36cq:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7500r3k-48y4d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7500rm-36cq-lc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7504r-fm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7504r3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7508r-fm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7508r3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7512r-fm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7512r3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7516-sup2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7516n-ch:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7516r-fm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7800r3-36d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7800r3-48cq:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7800r3a-36d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7800r3a-36dm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7800r3a-36p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7800r3a-36pm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7800r3ak-36dm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7800r3ak-36pm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7800r3k-48cq:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7800r3k-48cqms:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7800r3k-72y:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7804r3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7808r3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7812r3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7816lr3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
| cpe:2.3:h:arista:7816r3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arista |
- cpe:2.3:h:arista:7280cr2k-30:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280cr2k-60:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280cr2m-30:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280cr3-32d4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280cr3-32p4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280cr3-36s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280cr3-96:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280cr3a-24d12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280cr3a-48d6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280cr3a-72:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280cr3ak-24d12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280cr3ak-48d6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280cr3ak-72:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280cr3am-24d12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280cr3am-48d6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280cr3am-72:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280cr3mk-32d4s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280cr3mk-32p4s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280dr3-24:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280dr3a-36:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280dr3a-54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280dr3ak-36:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280dr3ak-54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280dr3am-36:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280dr3am-54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280pr3-24:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280qr-c36:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280qr-c36-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280qr-c72:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280qra-c36s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280qra-c36sm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280sr-48c6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280sr2-48yc6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280sr2-48yc6-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280sr2a-48yc6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280sr2a-48yc6-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280sr2k-48c6-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280sr3-40yc6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280sr3-48yc8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280sr3m-48yc8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280sra-48c6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280sra-48c6-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280sram-48c6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280srm-40cx2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280tr-48c6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280tr3-40c6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280tra-48c6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7280tra-48c6-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7289r3a-sc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7289r3ak-sc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7289r3am-sc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7500r-36cq-lc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7500r-36q-lc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7500r-48s2cq-lc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7500r-8cfpx-lc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7500r2-36cq-lc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7500r2a-36cq-lc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7500r2ak-36cq-lc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7500r2ak-48ycq-lc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7500r2am-36cq-lc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7500r2m-36cq-lc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7500r3-24d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7500r3-24p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7500r3-36cq:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7500r3k-36cq:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7500r3k-48y4d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7500rm-36cq-lc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7504r-fm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7504r3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7508r-fm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7508r3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7512r-fm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7512r3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7516-sup2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7516n-ch:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7516r-fm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7800r3-36d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7800r3-48cq:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7800r3a-36d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7800r3a-36dm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7800r3a-36p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7800r3a-36pm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7800r3ak-36dm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7800r3ak-36pm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7800r3k-48cq:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7800r3k-48cqms:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7800r3k-72y:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7804r3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7808r3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7812r3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7816lr3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
- cpe:2.3:h:arista:7816r3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arista
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-06-09 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2026-7473
- 2026-10-03 Alias added: GHSA-mcx4-vm6v-r473
- 2026-10-07 CISA SSVC decision points changed
- 2026-10-16 EPSS moved to the 50th–90th percentile
References
More Arista Eos vulnerabilities
- TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
- TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
- TI-2017-10594 Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a… CVSS 3.1CRITICAL 9.8
- TI-2024-05929 Openssh: regresshion - race condition in ssh allows rce/dos CVSS 3.1HIGH 8.1
- TI-2020-08209 utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute… CVSS 3.1CRITICAL 9.8
- TI-2017-13226 The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-7473 · CVE Program
- CVE-2026-7473 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-mcx4-vm6v-r473 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences