Lucene search
+L

CVE-2026-73443 On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is running can capture a legitimate authenticated VRRP advertisement and replay it indef

🗓️ 16 Sep 2026 18:47:30Reported by AristaType 
cvelist
 cvelist
🔗 www.cve.org👁 5 Views

Arista EOS unauthenticated DoS via replay of VRRPv2 IP-AH authenticated advertisements.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
arista
Arista
Security Advisory 0148
2 Sep 202600:00
arista
arista
Arista
Security Advisory 0157
9 Sep 202600:00
arista
cve
CVE
CVE-2026-73443
16 Sep 202618:47
cve
euvd
EUVD
EUVD-2026-80996
16 Sep 202618:47
euvd
nvd
NVD
CVE-2026-73443
16 Sep 202619:17
nvd
[
  {
    "vendor": "Arista Networks",
    "product": "EOS",
    "platforms": [
      "710 Series",
      "720D Series",
      "720XP/722XPM Series",
      "750X Series",
      "7010TX Series",
      "7020R/R4 Series",
      "7130 Series running EOS",
      "7170 Series",
      "7050X3/X4 Series",
      "7060X/X2/X4/X5/X6 Series",
      "7260X/X3 Series",
      "7280R/R2/R3/R4 Series",
      "7300X/X3 Series",
      "7320X Series",
      "7358X4 Series",
      "7368X4 Series",
      "7388X5 Series",
      "7500R/R2/R3 Series",
      "7800R3/R4 Series",
      "7700R4 Series",
      "AWE 5000 Series",
      "AWE 7200R Series",
      "CloudEOS",
      "cEOS-lab",
      "vEOS-lab",
      "CloudVision eXchange",
      "virtual or physical appliance"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "4.36.0",
        "lessThanOrEqual": "4.36.1F",
        "changes": [
          {
            "at": "4.36.2F",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.35.0",
        "lessThanOrEqual": "4.35.5M",
        "changes": [
          {
            "at": "4.35.6M",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.34.0",
        "lessThanOrEqual": "4.34.7M",
        "changes": [
          {
            "at": "4.34.8M",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.33.0",
        "lessThanOrEqual": "4.33.9M",
        "changes": [
          {
            "at": "4.33.10M",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Sep 2026 18:47Current
CVSS 3.14.7
CVSS 45.3
5