CVE-2025-7048
Unknown
Unknown - Not Provided
Denial of Service via MACsec Packet Handling in Arista EOS
Publication date: 2026-01-06
Last updated on: 2026-01-06
Assigner: Arista Networks, Inc.
Description
Description
On affected platforms running Arista EOS with MACsec configuration, a specially crafted packet can cause the MACsec process to terminate unexpectedly. Continuous receipt of these packets with certain MACsec configurations can cause longer term disruption of dataplane traffic.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| arista | arista_eos | * |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-805 | The product uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability affects Arista EOS platforms configured with MACsec. A specially crafted packet can cause the MACsec process to terminate unexpectedly. If such packets are received continuously under certain MACsec configurations, it can lead to longer term disruption of dataplane traffic.
How can this vulnerability impact me? :
The vulnerability can cause the MACsec process on affected devices to stop unexpectedly, which may result in prolonged disruption of dataplane traffic. This can impact network availability and reliability.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70