CVE-2026-121292 - Vulnerability Details - OpenCVE

A malformed Error Report can cause EOS to read beyond packet boundaries, potentially terminating the RPKI agent or exposing unintended memory contents through logging.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements Present

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact Low

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://www.arista.com/en/support/advisories-notices/security-advisory/25044-security-advisory-0222

History

Tue, 10 Nov 2026 20:15:00 +0000

Type	Values Removed	Values Added
Description		A malformed Error Report can cause EOS to read beyond packet boundaries, potentially terminating the RPKI agent or exposing unintended memory contents through logging.
Title		Security Advisory 0222
Weaknesses		CWE-125
References		https://www.arista.com/en/support/advisories-notices/security-advisory/25044-security-advisory-0222
Metrics		cvssV3_1 `{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H'}` cvssV4_0 `{'score': 8.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:L/SA:N'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: Arista

Published: 2026-11-10T20:09:58.193Z

Updated: 2026-11-10T20:09:58.193Z

Reserved: 2026-11-03T11:21:01.892Z

Link: CVE-2026-121292

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-11-10T20:18:54.743

Modified: 2026-11-10T20:18:54.743

Link: CVE-2026-121292

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-125

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-121292", "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "state": "PUBLISHED", "assignerShortName": "Arista", "dateReserved": "2026-11-03T11:21:01.892Z", "datePublished": "2026-11-10T20:09:58.193Z", "dateUpdated": "2026-11-10T20:09:58.193Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista", "dateUpdated": "2026-11-10T20:09:58.193Z"}, "title": "Security Advisory 0222", "descriptions": [{"lang": "en", "value": "A malformed Error Report can cause EOS to read beyond packet boundaries, potentially terminating the RPKI agent or exposing unintended memory contents through logging."}], "affected": [{"vendor": "Arista Networks", "product": "EOS", "defaultStatus": "unaffected", "versions": [{"version": "4.37.0F", "status": "affected", "versionType": "custom"}, {"version": "4.36.0F", "status": "affected", "versionType": "custom", "lessThanOrEqual": "4.36.2F"}, {"version": "4.35.0F", "status": "affected", "versionType": "custom", "lessThanOrEqual": "4.35.6M"}, {"version": "4.34.0F", "status": "affected", "versionType": "custom", "lessThanOrEqual": "4.34.8M"}, {"version": "4.33.0F", "status": "affected", "versionType": "custom", "lessThanOrEqual": "4.33.10M"}, {"version": "4.24.0F", "status": "affected", "versionType": "custom", "lessThan": "4.33.0F"}], "platforms": ["710 Series", "720D Series", "720XP/722XPM Series", "750X Series", "7010TX Series", "7020R/R4 Series", "7130 Series running EOS", "7170 Series", "7050X3/X4 Series", "7060X/X2/X4/X5/X6/XE7 Series", "7260X/X3 Series", "7280R/R2/R3/R4 Series", "7300X/X3 Series", "7320X Series", "7358X4 Series", "7368X4 Series", "7388X5 Series", "7500R/R2/R3 Series", "7800R3/R4 Series", "7700R4 Series", "AWE 5000 Series", "AWE 7200R Series", "ZTX-7200 Series", "CloudEOS", "cEOS-lab", "vEOS-lab", "CloudVision eXchange, virtual or physical appliance"]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "baseScore": 8.2, "baseSeverity": "HIGH"}}, {"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:L/SA:N", "baseScore": 8.3, "baseSeverity": "HIGH"}}], "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/25044-security-advisory-0222", "tags": ["vendor-advisory"]}], "source": {"defects": ["1936846"], "advisory": "Security Advisory 0222", "discovery": "INTERNAL"}, "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read"}]}], "configurations": [{"lang": "en", "value": "switch> show bgp rpki cache\n\nThe configuration should contain an RPKI cache entry under BGP:\n\nrouter bgp <ASN>\n rpki cache <cache-name>\n host <cache-address>", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<pre>switch> show bgp rpki cache\n\nThe configuration should contain an RPKI cache entry under BGP:\n\nrouter bgp <ASN>\n rpki cache <cache-name>\n host <cache-address></pre>"}]}], "impacts": [{"capecId": "CAPEC-540", "descriptions": [{"lang": "en", "value": "CAPEC-540 Overread Buffers"}]}]}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["710 Series", "720D Series", "720XP/722XPM Series", "750X Series", "7010TX Series", "7020R/R4 Series", "7130 Series running EOS", "7170 Series", "7050X3/X4 Series", "7060X/X2/X4/X5/X6/XE7 Series", "7260X/X3 Series", "7280R/R2/R3/R4 Series", "7300X/X3 Series", "7320X Series", "7358X4 Series", "7368X4 Series", "7388X5 Series", "7500R/R2/R3 Series", "7800R3/R4 Series", "7700R4 Series", "AWE 5000 Series", "AWE 7200R Series", "ZTX-7200 Series", "CloudEOS", "cEOS-lab", "vEOS-lab", "CloudVision eXchange, virtual or physical appliance"], "product": "EOS", "vendor": "Arista Networks", "versions": [{"status": "affected", "version": "4.37.0F", "versionType": "custom"}, {"lessThanOrEqual": "4.36.2F", "status": "affected", "version": "4.36.0F", "versionType": "custom"}, {"lessThanOrEqual": "4.35.6M", "status": "affected", "version": "4.35.0F", "versionType": "custom"}, {"lessThanOrEqual": "4.34.8M", "status": "affected", "version": "4.34.0F", "versionType": "custom"}, {"lessThanOrEqual": "4.33.10M", "status": "affected", "version": "4.33.0F", "versionType": "custom"}, {"lessThan": "4.33.0F", "status": "affected", "version": "4.24.0F", "versionType": "custom"}]}], "source": "[email protected]"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A malformed Error Report can cause EOS to read beyond packet boundaries, potentially terminating the RPKI agent or exposing unintended memory contents through logging."}], "id": "CVE-2026-121292", "lastModified": "2026-11-10T20:18:54.743", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 4.2, "source": "[email protected]", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "[email protected]", "type": "Secondary"}]}, "published": "2026-11-10T20:18:54.743", "references": [{"source": "[email protected]", "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/25044-security-advisory-0222"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "[email protected]", "type": "Secondary"}]}