CVE-2026-73450: CWE-345: Insufficient Verification of Data Authenticity in Arista Networks EOS
On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the Dual Primary Detection network segment can send specially crafted packets to interfere with the dual-primary state. If the MLAG primary switch fails while these packets are present, the secondary switch incorrectly concludes it is in a dual-primary condition and err-disables its interfaces, leading to a traffic interruption.
AI Analysis
Technical Summary
This vulnerability (CVE-2026-73450) involves insufficient verification of data authenticity (CWE-345) in Arista EOS when MLAG Dual Primary Detection is configured. An unauthenticated attacker on the relevant network segment can send specially crafted packets to disrupt the dual-primary state. Upon failure of the MLAG primary switch, the secondary switch may mistakenly believe it is in a dual-primary state and err-disable its interfaces, resulting in denial of service through traffic interruption. The CVSS 3.1 score is 6.9 (medium severity) with attack vector as adjacent network, high attack complexity, no privileges required, no user interaction, and scope changed. The impact is limited to integrity loss and high availability impact without confidentiality loss.
Potential Impact
The vulnerability can cause traffic interruption due to the secondary MLAG switch err-disabling its interfaces when it incorrectly detects a dual-primary condition. This results in denial of service affecting network availability. There is no confidentiality or direct data integrity compromise beyond the state interference.
Mitigation Recommendations
No explicit patch or remediation details are provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restricting access to the Dual Primary Detection network segment to trusted devices and monitoring for anomalous packets may reduce risk.
CVE-2026-73450: CWE-345: Insufficient Verification of Data Authenticity in Arista Networks EOS
Description
On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the Dual Primary Detection network segment can send specially crafted packets to interfere with the dual-primary state. If the MLAG primary switch fails while these packets are present, the secondary switch incorrectly concludes it is in a dual-primary condition and err-disables its interfaces, leading to a traffic interruption.
CVSS v3.1
Score 6.9medium
Affected software
Arista Networks
EOS
pkg:github/arista-networks/eosRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2026-73450) involves insufficient verification of data authenticity (CWE-345) in Arista EOS when MLAG Dual Primary Detection is configured. An unauthenticated attacker on the relevant network segment can send specially crafted packets to disrupt the dual-primary state. Upon failure of the MLAG primary switch, the secondary switch may mistakenly believe it is in a dual-primary state and err-disable its interfaces, resulting in denial of service through traffic interruption. The CVSS 3.1 score is 6.9 (medium severity) with attack vector as adjacent network, high attack complexity, no privileges required, no user interaction, and scope changed. The impact is limited to integrity loss and high availability impact without confidentiality loss.
Potential Impact
The vulnerability can cause traffic interruption due to the secondary MLAG switch err-disabling its interfaces when it incorrectly detects a dual-primary condition. This results in denial of service affecting network availability. There is no confidentiality or direct data integrity compromise beyond the state interference.
Mitigation Recommendations
No explicit patch or remediation details are provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restricting access to the Dual Primary Detection network segment to trusted devices and monitoring for anomalous packets may reduce risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Arista
- Date Reserved
- 2026-08-12T16:42:47.921Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6aaa032c55bf5e2cf5e4d127
Added to database: 09/16/2026, 02:47:08 UTC
Last enriched: 09/16/2026, 03:01:38 UTC
Last updated: 09/16/2026, 04:01:54 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.