Description

On affected platforms with hardware IPSec support running Arista EOS with IPsec enabled and anti-replay protection configured, EOS may exhibit unexpected behavior in specific cases. Received duplicate encrypted packets, which should be dropped under normal anti-replay protection, will instead be forwarded due to this vulnerability. Note: this issue does not affect VXLANSec or MACSec encryption functionality.

INFO

Published Date :

2025-05-27T22:16:53.489Z

Last Modified :

2025-05-28T13:34:30.912Z

Source :

Arista
AFFECTED PRODUCTS

The following products are affected by CVE-2025-2796 vulnerability.

No data.

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-2796.

URL Resource
https://www.arista.com/en/support/advisories-notices/security-advisory/21413-security-advisory-0119 cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact