Description
On affected platforms running Arista EOS with a S-BFD reflector proxy configured, an unauthenticated attacker could send a crafted S-BFD Protocol Data Unit (PDU) that might cause the device to temporarily cease reflecting S-BFD packets, potentially resulting in S-BFD session timeouts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arista Networks | EOS | 4.36.0F – ≤ 4.36.2F, 4.35.0F – ≤ 4.35.6M, 4.34.0F – ≤ 4.34.8M, 4.33.0F – ≤ 4.33.10M, 4.32.0F – < 4.33.0F, 4.29.0F – < 4.32.0F, 4.28.2F – < 4.29.0F | 4.33.0F |
Advisories 1
- WID-SEC-2026-4509 Arista EOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 10, 2026