vulnerability
security-advisory-0113
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:L/Au:N/C:C/I:C/A:N) | Apr 8, 2025 | Apr 9, 2025 | Jan 14, 2026 |
Severity
9
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:N)
Published
Apr 8, 2025
Added
Apr 9, 2025
Modified
Jan 14, 2026
Description
On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear. Arista is not aware of any malicious uses of this issue in customer networks.
Solution
upgrade-solution-cve-2024-12378
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.