#VU109873 Improper access control in Arista Extensible Operating System (EOS) - CVE-2025-2826

Vulnerability identifier: #VU109873

Vulnerability risk: Low

CVSSv4.0: 0.6 [CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-2826

CWE-ID: CWE-284

Exploitation vector: Local network

Exploit availability: No

Vulnerable software:
Arista Extensible Operating System (EOS)
Operating systems & Components / Operating system

Vendor: Arista Networks

Description

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to improper enforcement of ACL policies. IPv4 ingress ACL, MAC ingress ACL, or IPv6 standard ingress ACL enabled on one or more ethernet or LAG interfaces may result in ACL policies not being enforced for ingress packets. This can cause incoming packets to incorrectly be allowed or denied.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

Arista Extensible Operating System (EOS): before

---

External links
https://www.arista.com/en/support/advisories-notices/security-advisory/21414-security-advisory-0120

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.