← CVE Intelligence

CVE-2025-6188

On affected platforms running Arista EOS, maliciously formed UDP packets with source port 3503 may be accepted by EOS. UDP Port 3503 is associated with LspPing Echo Reply. This can result in unexpected behaviors, especially for UDP based services that do n PUBLISHED

Description (CNA)

On affected platforms running Arista EOS, maliciously formed UDP packets with source port 3503 may be accepted by EOS. UDP Port 3503 is associated with LspPing Echo Reply. This can result in unexpected behaviors, especially for UDP based services that do not perform some form of authentication.

Affected (CNA)

Vendor / productVersions
Arista Networks / EOSaffected 4.33.0 through 4.33.1F; affected 4.33.1.0 through 4.33.1.2F; affected 4.32.4.0 through 4.32.4.1M; affected 4.31.0 through 4.31.6M; affected 4.30.0 through 4.30.9.1M

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.