On affected Arista EOS platforms, when specialized non-standard debugging trace levels are explicitly enabled, plaintext private keys can be written in clear text to log files. This insertion of sensitive information into logs (CWE-532) requires that an attacker already have authenticated local administrative access to the device shell. The vulnerability was discovered internally by Arista, and there are no reports of active exploitation in customer environments. The CVSS 3.1 score is 6.3, reflecting medium severity with high impact on confidentiality, integrity, and availability, but requiring high privileges and user interaction.

If exploited, sensitive private keys could be exposed in log files, potentially compromising device security. However, exploitation requires authenticated local administrative access and enabling of specialized debug trace levels, limiting the attack surface. There are no known active exploits in the wild.

No official patch or remediation details are provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until then, avoid enabling specialized non-standard debugging trace levels unless necessary and restrict administrative access to trusted personnel only.