Description
A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window, the supplicant's traffic may pass without ACL enforcement.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arista Networks | EOS | 4.36.0 – ≤ 4.36.1F, 4.35.0 – ≤ 4.35.5M, 4.34.0 – ≤ 4.34.7.1M, 0.0.0 – ≤ 4.33.9M | — |
Advisories 1
- WID-SEC-2026-3368 Arista EOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 14, 2026