Description
CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instability in the CVX cluster. An attacker could use this behavior to create a denial of service (DoS) scenario. Note that this would require the attacker to have a high privilege access to the connected switch to be able to send custom TCP packets to the CVX.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arista Networks | EOS / CloudVision eXchange (CVX) | 4.34.0F – ≤ 4.34.1F, 4.33.0M – ≤ 4.33.4M, 4.32.0M – ≤ 4.32.6M, 4.31.0 – < 4.32.0, 4.30.0 – < 4.31.0 | 4.32.0 |
Advisories 2
- WID-SEC-2025-2639 Arista EOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 7, 2026
- NCSC-2025-0374 Kwetsbaarheden verholpen in Arista EOS NCSC-NL (Netherlands) · Nov 20, 2025