CVE search · CVE-2026-121368
CVE-2026-121368
high 8.9
On affected platforms running Arista EOS with Bidirectional Forwarding Detection (BFD) configured to use keyed MD5 or keyed SHA1 authentication, an unauthenticated attacker with network adjacency (direct or multi-hop) to a BFD-enabled interface can send a specially crafted BFD packet resulting in a system reboot.
Details
- Status
- Received
- Published
- Last changed
- Source
- psirt@arista.com
- Weakness
- CWE-787
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 4.0 | high 8.9 | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
psirt@arista.comSecondary |
| CVSS 3.1 | high 8.6 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H |
psirt@arista.comSecondary |