Arista Extensible Operating System Vulnerability
Arista Extensible Operating System (EOS) contains an incomplete comparison with missing factors vulnerability when the switch incorrectly decapsulate and forwards other unexpected tunneled packet with a destination IP matching its configured decapsulation IP.
CVSS Score
9.8
CRITICAL
Published
09 Jun 2026 00:00
Modified
N/A
Vendor
Arista
Product
Extensible Operating System
Source
CIRCL
Affected Versions
Fix
Vendor Patch / Mitigation Available
Weaknesses (CWE)
CWE-1023
Affected Systems
Arista
Extensible Operating System
Arista
VeloCloud Orchestrator
Extensible Operating System
External Links
KEV Status
Known Exploited Vulnerability