2 lines
2.2 KiB
JSON
2 lines
2.2 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["EOS"],"product":"EOS","vendor":"Arista Networks","versions":[{"lessThanOrEqual":"4.33.2F","status":"affected","version":"4.33.0","versionType":"custom"}]}],"source":"psirt@arista.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"On affected platforms with hardware IPSec support running Arista EOS with IPsec enabled and anti-replay protection configured, EOS may exhibit unexpected behavior in specific cases. Received duplicate encrypted packets, which should be dropped under normal anti-replay protection, will instead be forwarded due to this vulnerability.\n\nNote: this issue does not affect VXLANSec or MACSec encryption functionality."},{"lang":"es","value":"En las plataformas afectadas con compatibilidad de hardware IPSec y que ejecutan Arista EOS con IPsec habilitado y protección antirreproducción configurada, EOS puede presentar un comportamiento inesperado en casos específicos. Los paquetes cifrados duplicados recibidos, que deberían descartarse con la protección antirreproducción normal, se reenviarán debido a esta vulnerabilidad. Nota: Este problema no afecta la funcionalidad de cifrado de VXLANSec ni de MACSec."}],"id":"CVE-2025-2796","lastModified":"2026-06-17T09:07:38.017","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"psirt@arista.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-2796","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-05-28T13:34:22.951770Z","version":"2.0.3"}}]},"published":"2025-05-27T23:15:21.283","references":[{"source":"psirt@arista.com","url":"https://www.arista.com/en/support/advisories-notices/security-advisory/21413-security-advisory-0119"}],"sourceIdentifier":"psirt@arista.com","vulnStatus":"Deferred"}
|