This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-120974 | BDVDB-2026-404471 Detail

Arista NetworksEOS

Description#

On affected platforms running Arista EOS with IPsec AutoVPN Feature configured with dynamic paths, the configured IPsec replay window may not be applied as expected. As a result, IPsec anti-replay protection may be silently inactive even when it has been configured via an SA policy, contrary to the operator's expectation. This issue does not allow decryption of the affected IPsec traffic, but it may allow replay of previously valid protected traffic.

Impact#

CAPEC-60 Reusing Session IDs (aka Session Replay)

Weaknesses#

  • CWE-294 Authentication Bypass by Capture-replay

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.