CVE-2026-73458
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Summary
On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may result in undesirable network changes because various routing protocols monitor status on BFD session(s).
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Arista Networks | EOS | 4.36.0 <= 4.36.1F | affected |
| Arista Networks | EOS | 4.35.0 <= 4.35.5M | affected |
| Arista Networks | EOS | 4.34.0 <= 4.34.7M | affected |
| Arista Networks | EOS | 4.33.0 <= 4.33.8M | affected |
Weaknesses
- CWE-303: CWE-303 Incorrect Implementation of Authentication Algorithm
Workarounds
No mitigation is available for this issue.
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.