On affected Arista EOS platforms with hardware IPSec support and specific IPsec features enabled, physical interface flaps or certain agent restarts may trigger IPsec tunnel re-establishment using existing Security Associations. This can cause sequence number mismatches between tunnel endpoints, resulting in unstable communication. The vulnerability is classified as CWE-672 (Operation on a Resource after Expiration or Release). The CVSS 3.1 base score is 5.9 (medium severity), reflecting network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact. No vendor advisory or patch information is currently provided.

The vulnerability can cause unstable communication over IPsec tunnels due to sequence number mismatches after interface flaps or agent restarts. Confidentiality impact is rated high by CVSS, but integrity and availability impacts are not indicated. There are no known exploits in the wild. The issue affects network communication stability on affected devices but does not indicate direct code execution or data modification.

No official patch or remediation guidance is currently available from the vendor. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, operators should be aware of potential IPsec tunnel instability following physical interface flaps or agent restarts on affected versions and consider operational procedures to minimize such events.