EUVD-2026-80009
GHSA-c355-4cc9-9547
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (arista) · only source for this CVE.
CVSS VectorVendor: arista
Lifecycle Timeline
1DescriptionCVE.org
On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim the virtual router master role, enabling the attacker to intercept, modify, or discard traffic that hosts on the segment send to the virtual gateway address.
AnalysisAI
VRRPv2 IP Authentication Header (IP-AH) authentication can be bypassed in affected versions of Arista EOS, allowing an unauthenticated attacker on the same Layer 2 segment as the VRRP group to impersonate the virtual router master. Successful takeover lets the attacker intercept, modify, or discard traffic that hosts send to the virtual gateway IP, effectively hijacking the default gateway for that VLAN. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today