Arista EOS up to 4.34.3.1M MACsec buffer access with incorrect length value

Summaryinfo

A vulnerability, which was classified as problematic, was found in Arista EOS up to 4.29.x/4.31.9M/4.32.7M/4.33.5M/4.34.3.1M. Affected by this vulnerability is an unknown functionality of the component MACsec. The manipulation results in buffer access with incorrect length value. This vulnerability was named CVE-2025-7048. The attack needs to be approached within the local network. There is no available exploit. You should upgrade the affected component.

Detailsinfo

A vulnerability classified as problematic has been found in Arista EOS up to 4.29.x/4.31.9M/4.32.7M/4.33.5M/4.34.3.1M. Affected is some unknown functionality of the component MACsec. The manipulation with an unknown input leads to a buffer access with incorrect length value vulnerability. CWE is classifying the issue as CWE-805. The product uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer. This is going to have an impact on availability. CVE summarizes:

On affected platforms running Arista EOS with MACsec configuration, a specially crafted packet can cause the MACsec process to terminate unexpectedly. Continuous receipt of these packets with certain MACsec configurations can cause longer term disruption of dataplane traffic.

The advisory is shared for download at arista.com. This vulnerability is traded as CVE-2025-7048 since 07/03/2025. The exploitability is told to be easy. The attack can only be initiated within the local network. The exploitation doesn't require any form of authentication. There are neither technical details nor an exploit publicly available.

Upgrading to version 4.30.0 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-0962). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Arista

Name

• EOS

Version

• 4.0
• 4.1
• 4.2
• 4.3
• 4.4
• 4.5
• 4.6
• 4.7
• 4.8
• 4.9
• 4.10
• 4.11
• 4.12
• 4.13
• 4.14
• 4.15
• 4.16
• 4.17
• 4.18
• 4.19
• 4.20
• 4.21
• 4.22
• 4.23
• 4.24
• 4.25
• 4.26
• 4.27
• 4.28
• 4.29
• 4.31.9M
• 4.32.7M
• 4.33.5M
• 4.34.3.1M

License

• commercial

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion