← Back to CVE List
CVE-2026-73462NVD
Vulnerability Summary
On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the IGMP snooping agent to terminate unexpectedly. This results in a temporary disruption of multicast traffic management, which may cause multicast traffic to be flooded to all ports of the affected VLAN until the service recovers. Repeated exploitation could result in a prolonged loss of intended multicast forwarding behavior.
CVSS v4.0 Base Metrics — Score 7.1 (HIGH)
Attack VectorAdjacent
Attack ComplexityLow
Attack RequirementsNone
Privileges RequiredNone
User InteractionNone
Confidentiality (Vulnerable System)None
Integrity (Vulnerable System)None
Availability (Vulnerable System)High
Confidentiality (Subsequent System)None
Integrity (Subsequent System)None
Availability (Subsequent System)None
CVSS v3.1 Base Metrics — Score 6.5 (MEDIUM)
Attack VectorAdjacent
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
ConfidentialityNone
IntegrityNone
AvailabilityHigh
Affected & Patched Versions
- Arista Networks EOS >= 4.36.0 and <= 4.36.1F
- Arista Networks EOS >= 4.35.0 and <= 4.35.5M
- Arista Networks EOS >= 4.34.0 and <= 4.34.7.1M
- Arista Networks EOS >= 4.33.0 and <= 4.33.8M
- Arista Networks EOS 4.36.1F
- Arista Networks EOS 4.35.5M
- Arista Networks EOS 4.34.7.1M
- Arista Networks EOS 4.33.8M