Exposed Global Encryption Key in Arista EOS Logging
CVE-2025-3456

3.8LOW

Key Information:

Vendor

Arista Networks

Status
Eos
Vendor
CVE Published:
25 August 2025

What is CVE-2025-3456?

A vulnerability has been identified in Arista EOS where the global common encryption key configuration can be logged in clear text within both local and remote accounting logs. This exposure could potentially allow malicious actors to leverage the encryption key alongside protocol-specific encrypted secrets extracted from the device's running configuration. If symmetric passwords are utilized in neighbor protocol relationships, compromised encryption keys can lead to unauthorized access and facilitate attacks on network integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

EOS EOS 4.34.0F

EOS EOS 4.33.0 <= 4.33.3F

EOS EOS 4.32.0 <= 4.32.5M

References

https://https://www.arista.com/en/support/advisories-noti...

CVSS V3.1

Score:
3.8
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.