MEDIUMCVSS 5.8Vulnerability
CVE-2026-7473
Arista Extensible Operating System (EOS) contains an incomplete comparison with missing factors vulnerability when the switch incorrectly decapsulate and forwards other unexpected tunneled packet with a destination IP matching its configured decapsulation IP.
Properties
- severity
- MEDIUM
- product
- Extensible Operating System
- vulnerabilityName
- Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
- cvss_score
- 5.8
- epss_score
- 0.01108
- dueDate
- 2026-06-23
- requiredAction
- Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- dateAdded
- 2026-06-09
- cve_id
- CVE-2026-7473
- cvss_vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
- vendorProject
- Arista
- epss_percentile
- 0.63699
Related Entities (3)
ENRICHED_BY (1)
→[Source]FIRST EPSS
KNOWN_EXPLOITED (1)
→[Source]CISA KEV
DESCRIBES (1)
←[KEVEntry]Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
Explore deeper with Ninja Signal's threat intelligence graph