vulnerability
security-advisory-0113
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:L/Au:N/C:C/I:C/A:N) | Apr 8, 2025 | Apr 9, 2025 | Jan 14, 2026 |
Severity
9
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:N)
Published
Apr 8, 2025
Added
Apr 9, 2025
Modified
Jan 14, 2026
Description
On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear. Arista is not aware of any malicious uses of this issue in customer networks.
Solution
upgrade-solution-cve-2024-12378
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.