The vulnerability allows an attacker, by causing physical interface flaps or agent restarts, to trigger the re-establishment of IPsec tunnels that reuse existing security associations and produce sequence number mismatches between tunnel endpoints. This mismatch can lead to unstable or disrupted communication across the affected network links, potentially resulting in a denial of service for hosts that rely on those tunnels.

Arista Networks EOS operating systems. Affected versions include all releases in the 4.35.x train from 4.35.0F onward, the 4.34.x train from 4.34.4M onward, the 4.33.x train from 4.33.6M onward, the 4.32.x train from 4.32.8M onward, and the 4.31.x train from 4.31.10M onward.

The CVSS score of 8.2 indicates a high severity vulnerability. Although no EPSS score is published and the vulnerability is not listed in the CISA KEV catalog, the instability it causes can be critical in production environments. The likely attack vector is local: an attacker who can trigger interface flaps or perform agent restarts on the device can exploit the issue, so mitigating this flaw requires restricting that capability or applying the vendor’s patch.