Security Advisory 0219
Summary
| CVE | CVE-2026-120974 |
|---|---|
| State | PUBLISHED |
| Assigner | Arista |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-11-10 20:18:52 UTC |
| Updated | 2026-11-12 19:24:37 UTC |
| Description | On affected platforms running Arista EOS with IPsec AutoVPN Feature configured with dynamic paths, the configured IPsec replay window may not be applied as expected. As a result, IPsec anti-replay protection may be silently inactive even when it has been configured via an SA policy, contrary to the operator's expectation. This issue does not allow decryption of the affected IPsec traffic, but it may allow replay of previously valid protected traffic. |
Risk And Classification
Primary CVSS: v4.0 6.9 MEDIUM from [email protected]
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Problem Types: CWE-294 | CWE-294 CWE-294 Authentication Bypass by Capture-replay
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 4.0 | [email protected] | Secondary | 6.9 | MEDIUM | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:H/SA:L/E:X/C... |
| 4.0 | CNA | DECLARED | 6.9 | MEDIUM | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:H/SA:L |
| 3.1 | [email protected] | Secondary | 5.3 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
| 3.1 | CNA | DECLARED | 5.3 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
CVSS v4.0 Breakdown
Attack Vector
NetworkAttack Complexity
LowAttack Requirements
PresentPrivileges Required
NoneUser Interaction
NoneConfidentiality
NoneIntegrity
NoneAvailability
LowSub Conf.
NoneSub Integrity
HighSub Availability
LowCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS v3.1 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
NoneIntegrity
NoneAvailability
LowCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Arista Networks | EOS | affected 4.27.0F 4.28.0F custom | AWE 5000 Series, AWE 7200R Series, CloudEOS |
| CNA | Arista Networks | EOS | affected 4.28.0F 4.28.13M custom | AWE 5000 Series, AWE 7200R Series, CloudEOS |
| CNA | Arista Networks | EOS | affected 4.29.0F 4.30.0F custom | AWE 5000 Series, AWE 7200R Series, CloudEOS |
| CNA | Arista Networks | EOS | affected 4.30.0F 4.31.0F custom | AWE 5000 Series, AWE 7200R Series, CloudEOS |
| CNA | Arista Networks | EOS | affected 4.31.0F 4.32.0F custom | AWE 5000 Series, AWE 7200R Series, CloudEOS |
| CNA | Arista Networks | EOS | affected 4.32.0F 4.33.0F custom | AWE 5000 Series, AWE 7200R Series, CloudEOS |
| CNA | Arista Networks | EOS | affected 4.33.0F 4.33.8M custom | AWE 5000 Series, AWE 7200R Series, CloudEOS |
| CNA | Arista Networks | EOS | affected 4.34.0F 4.34.7M custom | AWE 5000 Series, AWE 7200R Series, CloudEOS |
| CNA | Arista Networks | EOS | affected 4.35.0F 4.35.5M custom | AWE 5000 Series, AWE 7200R Series, CloudEOS |
| CNA | Arista Networks | EOS | affected 4.36.0F 4.36.1F custom | AWE 5000 Series, AWE 7200R Series, CloudEOS |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.arista.com/en/support/advisories-notices/security-advisory/25041-securit... | [email protected] | www.arista.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.