CVE-2026-120975 | BDVDB-2026-404472 Detail
Arista NetworksEOS
Description#
On affected platforms running Arista EOS with automatic certificate management configured and automatic Certificate Authority (CA) certificate retrieval enabled, a malicious packet may cause the AutoCertMgmt process to be terminated unexpectedly. Managed X.509 certificates will not be renewed automatically and may eventually expire, potentially disrupting TLS-dependent services.
Impact#
CAPEC-22 Exploiting Trust in Client
Weaknesses#
- CWE-197 Numeric Truncation Error
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.