Riskcovery

CVE-2025-3456

On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and protocol specific encrypted secrets from the device running-c

State
Published
Severity
3.8 Low
Published
Aug 25, 2025
Updated
Oct 12, 2026
Reserved
Apr 8, 2025

Read the record on cve.org

Description

On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and protocol specific encrypted secrets from the device running-config could then be used to obtain protocol specific passwords in cases where symmetric passwords are required between devices with neighbor protocol relationships.

Scores

CVSSScoreVectorSource
3.13.8 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:NArista

Weaknesses

  • CWE-532 Insertion of Sensitive Information into Log File

Affected Products

ProductVersions
EOSArista Networks
  • 4.34.0FAffected
  • 4.33.0 through 4.33.3FAffected
  • 4.32.0 through 4.32.5MAffected
  • 4.31.0 through 4.31.7MAffected
  • 4.30.0 through 4.30.10MAffected
  • 4.29.0 through 4.29.10MAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.