{"cve_id":"CVE-2026-7473","published":"2026-06-05T17:17:02.850000+00:00","last_modified":"2026-10-25T23:10:00.167000+00:00","vuln_status":"Analyzed","description":"On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interface—is present, the switch will incorrectly decapsulate and forward other unexpected tunneled packet with a destination IP matching its configured decapsulation IP. This occurs because the switch does not verify the tunnel protocol type, potentially leading to the unexpected processing of non-configured tunnel traffic.\n\n\n\nThis issue has been reported as being exploited in the wild.","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","base_score":5.8,"base_severity":"MEDIUM","attack_vector":"NETWORK","privileges_req":"NONE","user_interaction":"NONE","scope":"CHANGED","impact_c":"NONE","impact_i":"LOW","impact_a":"NONE","cwe_ids":["CWE-1023"],"in_kev":true,"kev_date_added":"2026-06-09","kev_ransomware":false,"epss_score":0.01108,"epss_percentile":0.65873,"cap_rule_version":"0.1.1","stage":"IMPACT","req_access":"NONE","req_vector":"NETWORK","req_user_interaction":false,"grant_access":"NONE","caps":["TAMPER"],"terminal":true,"cap_confidence":"high","ingested_at":"2026-10-28T03:37:13.940719+00:00","first_seen":"2026-06-05T17:17:02.850000+00:00","kev_first_seen":"2026-06-09T00:00:00+00:00","novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["arista"],"products":["7020sr-24c2","7020sr-32c2","7020srg-24c2","7020tr-48","7020tra-48","7280cr-48","7280cr2-60","7280cr2a-30","7280cr2a-60","7280cr2k-30","7280cr2k-60","7280cr2m-30","7280cr3-32d4","7280cr3-32p4","7280cr3-36s","7280cr3-96","7280cr3a-24d12","7280cr3a-48d6","7280cr3a-72","7280cr3ak-24d12","7280cr3ak-48d6","7280cr3ak-72","7280cr3am-24d12","7280cr3am-48d6","7280cr3am-72","7280cr3mk-32d4s","7280cr3mk-32p4s","7280dr3-24","7280dr3a-36","7280dr3a-54","7280dr3ak-36","7280dr3ak-54","7280dr3am-36","7280dr3am-54","7280pr3-24","7280qr-c36","7280qr-c36-m","7280qr-c72","7280qra-c36s","7280qra-c36sm","7280sr-48c6","7280sr2-48yc6","7280sr2-48yc6-m","7280sr2a-48yc6","7280sr2a-48yc6-m","7280sr2k-48c6-m","7280sr3-40yc6","7280sr3-48yc8","7280sr3m-48yc8","7280sra-48c6","7280sra-48c6-m","7280sram-48c6","7280srm-40cx2","7280tr-48c6","7280tr3-40c6","7280tra-48c6","7280tra-48c6-m","7289r3a-sc","7289r3ak-sc","7289r3am-sc","7500r-36cq-lc","7500r-36q-lc","7500r-48s2cq-lc","7500r-8cfpx-lc","7500r2-36cq-lc","7500r2a-36cq-lc","7500r2ak-36cq-lc","7500r2ak-48ycq-lc","7500r2am-36cq-lc","7500r2m-36cq-lc","7500r3-24d","7500r3-24p","7500r3-36cq","7500r3k-36cq","7500r3k-48y4d","7500rm-36cq-lc","7504r-fm","7504r3","7508r-fm","7508r3","7512r-fm","7512r3","7516-sup2","7516n-ch","7516r-fm","7800r3-36d","7800r3-48cq","7800r3a-36d","7800r3a-36dm","7800r3a-36p","7800r3a-36pm","7800r3ak-36dm","7800r3ak-36pm","7800r3k-48cq","7800r3k-48cqms","7800r3k-72y","7804r3","7808r3","7812r3","7816lr3","7816r3","eos"],"affected":[{"vendor":"arista","product":"eos","ranges":["all versions"]}]}