This vulnerability arises from CVX not properly handling unexpected messages from connected switches, resulting in agent crashes that destabilize the CVX cluster. An attacker with high privilege on a connected switch could exploit this by sending custom TCP packets to trigger the crash and cause a denial of service. The affected versions include 4.30.0 through 4.34.0F of EOS / CVX. There is no vendor advisory or patch information provided, and no known exploits in the wild have been reported.

The primary impact is denial of service due to agent crashes and cluster instability in CVX. There is no indication of confidentiality or integrity loss. Exploitation requires high privilege on a connected switch, limiting the attack surface to trusted or compromised network components.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict high privilege access to connected switches and monitor for unusual traffic patterns that could indicate attempts to send unexpected messages to CVX.