Arista EOS VLAN Tag Vulnerability Leading to Control Plane Disruptions

Vulnerability

A vulnerability exists in Arista EOS on certain platforms, where a specially crafted packet with an incorrect VLAN tag can be mistakenly sent to the CPU. This misrouting may disrupt normal control plane operations, potentially causing issues such as route flaps or incorrect handling of multicast routes.

Impact

Exploitation of this vulnerability can lead to control plane disruptions, causing route flaps and incorrect management of learned multicast routes.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
5.7
impact
0.6
exploitability
4.9
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.