CVE-2026-121367

Name of the Vulnerable Software and Affected Versions Arista EOS (affected versions not specified)

Description On platforms with Routing Information Protocol version 2 (RIPv2) configured, RIPv2 may be silently enabled on management interfaces despite the RIP agent intending to disable it. This allows an unauthenticated attacker on the adjacent network to send crafted RIPv2 route advertisements to the management IP address, which the device may accept and install without authentication. This could lead to the redirection of traffic flows to an attacker-controlled destination, the installation of more-specific routes that blackhole legitimate traffic, or general disruption of network reachability for systems routing through the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.