{ "document": { "category": "security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en-US", "publisher": { "category": "vendor", "contact_details": "support@arista.com", "name": "Arista PSIRT", "namespace": "https://www.arista.com" }, "references": [ { "category": "self", "summary": "Security advisory 219 canonical URL", "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/25041-security-advisory-0219" } ], "title": "Security Advisory 219", "tracking": { "current_release_date": "2026-11-08T09:58:18Z", "generator": { "engine": { "name": "Arista Networks SecEng Service CSAF Generator" } }, "id": "Arista Networks Security Advisory 219", "initial_release_date": "2026-11-08T09:58:18Z", "revision_history": [ { "date": "2026-11-08T09:58:18Z", "number": "1", "summary": "Document created" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "CloudEOS VM hardware platform series", "product": { "name": "CloudEOS VM hardware platform series", "product_id": "CSAFPID-14" } }, { "category": "product_version", "name": "AWE-5000 hardware platform series", "product": { "name": "AWE-5000 hardware platform series", "product_id": "CSAFPID-12" } }, { "category": "product_version", "name": "AWE-7000 hardware platform series", "product": { "name": "AWE-7000 hardware platform series", "product_id": "CSAFPID-13" } } ], "category": "product_family", "name": "Hardware Platform Series" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "EOS version 4.28.14", "product": { "name": "EOS version 4.28.14", "product_id": "CSAFPID-8" } }, { "category": "product_version", "name": "EOS version 4.27.1", "product": { "name": "EOS version 4.27.1", "product_id": "CSAFPID-9" } }, { "category": "product_version", "name": "EOS version 4.33.9", "product": { "name": "EOS version 4.33.9", "product_id": "CSAFPID-6" } }, { "category": "product_version", "name": "EOS version 4.34.8", "product": { "name": "EOS version 4.34.8", "product_id": "CSAFPID-11" } }, { "category": "product_version", "name": "EOS version 4.35.6", "product": { "name": "EOS version 4.35.6", "product_id": "CSAFPID-7" } }, { "category": "product_version", "name": "EOS version 4.36.2", "product": { "name": "EOS version 4.36.2", "product_id": "CSAFPID-10" } } ], "category": "product_name", "name": "EOS" } ], "category": "product_family", "name": "Software Products" } ], "category": "vendor", "name": "Arista Networks, Inc." } ], "relationships": [ { "category": "installed_on", "full_product_name": { "name": "EOS version 4.28.14 installed on CloudEOS VM", "product_id": "CSAFPID-28" }, "product_reference": "CSAFPID-8", "relates_to_product_reference": "CSAFPID-14" }, { "category": "installed_on", "full_product_name": { "name": "EOS version 4.27.1 installed on AWE-7000", "product_id": "CSAFPID-21" }, "product_reference": "CSAFPID-9", "relates_to_product_reference": "CSAFPID-13" }, { "category": "installed_on", "full_product_name": { "name": "EOS version 4.36.2 installed on CloudEOS VM", "product_id": "CSAFPID-32" }, "product_reference": "CSAFPID-10", "relates_to_product_reference": "CSAFPID-14" }, { "category": "installed_on", "full_product_name": { "name": "EOS version 4.33.9 installed on AWE-5000", "product_id": "CSAFPID-17" }, "product_reference": "CSAFPID-6", "relates_to_product_reference": "CSAFPID-12" }, { "category": "installed_on", "full_product_name": { "name": "EOS version 4.33.9 installed on CloudEOS VM", "product_id": "CSAFPID-29" }, "product_reference": "CSAFPID-6", "relates_to_product_reference": "CSAFPID-14" }, { "category": "installed_on", "full_product_name": { "name": "EOS version 4.28.14 installed on AWE-7000", "product_id": "CSAFPID-22" }, "product_reference": "CSAFPID-8", "relates_to_product_reference": "CSAFPID-13" }, { "category": "installed_on", "full_product_name": { "name": "EOS version 4.36.2 installed on AWE-7000", "product_id": "CSAFPID-26" }, "product_reference": "CSAFPID-10", "relates_to_product_reference": "CSAFPID-13" }, { "category": "installed_on", "full_product_name": { "name": "EOS version 4.34.8 installed on AWE-7000", "product_id": "CSAFPID-24" }, "product_reference": "CSAFPID-11", "relates_to_product_reference": "CSAFPID-13" }, { "category": "installed_on", "full_product_name": { "name": "EOS version 4.35.6 installed on AWE-7000", "product_id": "CSAFPID-25" }, "product_reference": "CSAFPID-7", "relates_to_product_reference": "CSAFPID-13" }, { "category": "installed_on", "full_product_name": { "name": "EOS version 4.35.6 installed on CloudEOS VM", "product_id": "CSAFPID-31" }, "product_reference": "CSAFPID-7", "relates_to_product_reference": "CSAFPID-14" }, { "category": "installed_on", "full_product_name": { "name": "EOS version 4.35.6 installed on AWE-5000", "product_id": "CSAFPID-19" }, "product_reference": "CSAFPID-7", "relates_to_product_reference": "CSAFPID-12" }, { "category": "installed_on", "full_product_name": { "name": "EOS version 4.34.8 installed on CloudEOS VM", "product_id": "CSAFPID-30" }, "product_reference": "CSAFPID-11", "relates_to_product_reference": "CSAFPID-14" }, { "category": "installed_on", "full_product_name": { "name": "EOS version 4.36.2 installed on AWE-5000", "product_id": "CSAFPID-20" }, "product_reference": "CSAFPID-10", "relates_to_product_reference": "CSAFPID-12" }, { "category": "installed_on", "full_product_name": { "name": "EOS version 4.34.8 installed on AWE-5000", "product_id": "CSAFPID-18" }, "product_reference": "CSAFPID-11", "relates_to_product_reference": "CSAFPID-12" }, { "category": "installed_on", "full_product_name": { "name": "EOS version 4.27.1 installed on AWE-5000", "product_id": "CSAFPID-15" }, "product_reference": "CSAFPID-9", "relates_to_product_reference": "CSAFPID-12" }, { "category": "installed_on", "full_product_name": { "name": "EOS version 4.27.1 installed on CloudEOS VM", "product_id": "CSAFPID-27" }, "product_reference": "CSAFPID-9", "relates_to_product_reference": "CSAFPID-14" }, { "category": "installed_on", "full_product_name": { "name": "EOS version 4.28.14 installed on AWE-5000", "product_id": "CSAFPID-16" }, "product_reference": "CSAFPID-8", "relates_to_product_reference": "CSAFPID-12" }, { "category": "installed_on", "full_product_name": { "name": "EOS version 4.33.9 installed on AWE-7000", "product_id": "CSAFPID-23" }, "product_reference": "CSAFPID-6", "relates_to_product_reference": "CSAFPID-13" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-120974", "id": { "system_name": "Arista Bug ID", "text": "1570728" }, "notes": [ { "category": "description", "text": "On affected platforms running Arista EOS with IPsec AutoVPN Feature configured with dynamic paths, the configured IPsec replay window may not be applied as expected. As a result, IPsec anti-replay protection may be silently inactive even when it has been configured via an SA policy, contrary to the operator's expectation. This issue does not allow decryption of the affected IPsec traffic, but it may allow replay of previously valid protected traffic.", "title": "CVE Description" }, { "category": "other", "text": "In order to be vulnerable to CVE-2026-120974, the following condition must be met:\n\nBoth IPsec AutoVPN Feature and anti-replay window must be enabled:\n```\nswitch> show running-config all section key controller\nip security\n key controller\n profile dp\n dh-group 16\n lifetime 1 hours\n\nswitch> show running-config all section anti-replay\nip security\n sa policy dynamic-sa\n anti-replay detection\n\nswitch> show ip security key controller local\nDH group: 16\nCrypto suite: 128-bit AES , 256bit Hash\nInitial DH key created: 22 hours, 46 minutes, 43 seconds\nLast DH key created: 9 hours, 29 minutes, 40 seconds\nDH rekey: N/A\n```\n\nIf IPsec AutoVPN Feature is not configured or anti-replay window detection is disabled there is no exposure to this issue:\n```\nswitch> show running-config all section key controller\n\nswitch> show running-config all section anti-replay\nip security\n sa policy dynamic-sa\n no anti-replay detection\n```", "title": "1570728: Required Config for Exploitation" } ], "product_status": { "first_affected": [ "CSAFPID-9" ], "fixed": [ "CSAFPID-10", "CSAFPID-11", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8" ] }, "references": [ { "category": "external", "summary": "MITRE CVE Entry", "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-120974" } ], "remediations": [ { "category": "vendor_fix", "details": "Fixed in EOS version 4.28.14", "product_ids": [ "CSAFPID-8" ] }, { "category": "vendor_fix", "details": "Fixed in EOS version 4.33.9", "product_ids": [ "CSAFPID-6" ] }, { "category": "vendor_fix", "details": "Fixed in EOS version 4.34.8", "product_ids": [ "CSAFPID-11" ] }, { "category": "vendor_fix", "details": "Fixed in EOS version 4.35.6", "product_ids": [ "CSAFPID-7" ] }, { "category": "vendor_fix", "details": "Fixed in EOS version 4.36.2", "product_ids": [ "CSAFPID-10" ] }, { "category": "none_available", "details": "Not fixed in EOS version 4.27.1", "product_ids": [ "CSAFPID-9" ] }, { "category": "mitigation", "details": "There is no known mitigation for CVE-2026-120974. The recommended resolution is to upgrade to a remediated software version at your earliest convenience." } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CSAFPID-17", "CSAFPID-29", "CSAFPID-8", "CSAFPID-27", "CSAFPID-7", "CSAFPID-13", "CSAFPID-11", "CSAFPID-24", "CSAFPID-9", "CSAFPID-20", "CSAFPID-16", "CSAFPID-30", "CSAFPID-6", "CSAFPID-26", "CSAFPID-14", "CSAFPID-25", "CSAFPID-21", "CSAFPID-23", "CSAFPID-12", "CSAFPID-19", "CSAFPID-28", "CSAFPID-32", "CSAFPID-10", "CSAFPID-18", "CSAFPID-31", "CSAFPID-22", "CSAFPID-15" ] } ], "title": "CVE-2026-120974" } ] }