← CVE Intelligence

CVE-2026-73462

On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the I PUBLISHED

Description (CNA)

On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the IGMP snooping agent to terminate unexpectedly. This results in a temporary disruption of multicast traffic management, which may cause multicast traffic to be flooded to all ports of the affected VLAN until the service recovers. Repeated exploitation could result in a prolonged loss of intended multicast forwarding behavior.

Affected (CNA)

Vendor / productVersions
Arista Networks / EOSaffected 4.36.0 through 4.36.1F; affected 4.35.0 through 4.35.5M; affected 4.34.0 through 4.34.7.1M; affected 4.33.0 through 4.33.8M

CWE

CWE-125

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.