Exposed Global Encryption Key in Arista EOS Logging

CVE-2025-3456

What is CVE-2025-3456?

A vulnerability has been identified in Arista EOS where the global common encryption key configuration can be logged in clear text within both local and remote accounting logs. This exposure could potentially allow malicious actors to leverage the encryption key alongside protocol-specific encrypted secrets extracted from the device's running configuration. If symmetric passwords are utilized in neighbor protocol relationships, compromised encryption keys can lead to unauthorized access and facilitate attacks on network integrity.

References