CVE-2025-7048CWE-805

CVE-2025-7048

Medium · published January 7, 2026

CVSS v3.1

4.3

EPSS

Percentile

7.8

In the wild

Unconfirmed

What it is

On affected platforms running Arista EOS with MACsec configuration, a specially crafted packet can cause the MACsec process to terminate unexpectedly. Continuous receipt of these packets with certain MACsec configurations can cause longer term disruption of dataplane traffic.

The record

Technical detail

CVSS v3.1: 4.3 · MEDIUM
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0: Not supplied
EPSS: 0.00186 · 7.8th percentile
Weakness: CWE-805 · Buffer Access with Incorrect Length Value
Published: 2026-01-07T01:16Z

References (1)

https://www.arista.com/en/support/advisories-notices/security-advisory/23120-security-advisory-0132 · [email protected]

EPSS history

Timeline

06 JAN 19:15Z
On affected platforms running Arista EOS with MACsec configuration, a specially crafted packet can cause the MACsec process to terminate unexpectedly. Continuous receipt of these packets with certain MACsec configurations can cause longer term disruption o
cvelistv5