CVE-2025-8873

7.5 HIGH

On affected platforms running Arista EOS with IPsec configured, a specially crafted packet can cause the dataplane to stop processing all...

Published: 2026-06-04 · Last updated: 2026-06-05

Severity and scoring

CVSS: 7.5 HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE: CWE-1286

Description

On affected platforms running Arista EOS with IPsec configured, a specially crafted packet can cause the dataplane to stop processing all IPsec traffic. The control plane may detect this condition, and attempt to reset the IPsec processing pipeline. After reset traffic may not resume being processed. There is no impact to non-IPsec traffic or to IPsec traffic not originating or terminating on the system. This issue was reported by an Arista customer.

Source: NVD

References

Related CVEs

Same CWE

CVE-2026-50131 — Fedify is a TypeScript library for building federated server apps powered by ActivityPub (8.6 HIGH)
CVE-2019-25720 — Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain a denial-of-service vulnerability in all softwa... (6.5 MEDIUM)
CVE-2021-4479 — Dräger Atlan A350 versions 1.00 up to and including 1.01 contains an improper input handling vulnerability that allows attackers to cause... (4.0 MEDIUM)
CVE-2019-25723 — Dräger Perseus A500 software versions 2.00 through 2.02 contains an improper input handling vulnerability that allows external attackers ... (4.0 MEDIUM)
CVE-2026-24092 — Memory Corruption when processing fastboot commands to set display mode (7.2 HIGH)