Description
On affected platforms running Arista EOS with 802.1X with Dynamic Host Configuration Protocol (DHCP) device profiling enabled, a network-adjacent attacker can send a crafted DHCP packet to force the device to record a spoofed device profile. This may potentially allow the authenticated supplicant to acquire unauthorized access to a network segment with elevated privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arista Networks | EOS | 4.31.2F – < 4.32.0F, 4.32.0F – < 4.33.0F, 4.33.0F – ≤ 4.33.9M, 4.34.0F – ≤ 4.34.7M, 4.35.0F – ≤ 4.35.5M, 4.36.0F – ≤ 4.36.2F | 4.32.0F |
Advisories 1
- WID-SEC-2026-4509 Arista EOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 10, 2026