CVE search · CVE-2026-121290
CVE-2026-121290
high 8.3
On affected platforms running Arista EOS with Border Gateway Protocol (BGP) changing the BGP listen port from its default value disables default protective Access Control List (ACL) rules against unexpected BGP peering attempts.
Details
- Status
- Received
- Published
- Last changed
- Source
- psirt@arista.com
- Weakness
- CWE-420
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 4.0 | high 8.3 | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
psirt@arista.comSecondary |
| CVSS 3.1 | high 8.2 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H |
psirt@arista.comSecondary |