CVE-2025-2796: Arista Networks Eos

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

On affected platforms with hardware IPSec support running Arista EOS with IPsec enabled and anti-replay protection configured, EOS may exhibit unexpected behavior in specific cases. Received duplicate encrypted packets, which should be dropped under normal anti-replay protection, will instead be forwarded due to this vulnerability. Note: this issue does not affect VXLANSec or MACSec encryption functionality.

Affected products

• Arista Networks Eos: from 4.33.0, up to and including 4.33.2F

Published 2025-05-27. Last modified 2026-06-17.