CVE-2025-6188

{"id": "CVE-2025-6188", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@arista.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2025-08-25T21:15:38.500", "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/22021-security-advisory-0121", "source": "psirt@arista.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-290"}]}], "descriptions": [{"lang": "en", "value": "On affected platforms running Arista EOS, maliciously formed UDP packets with source port 3503 may be accepted by EOS. UDP Port 3503 is associated with LspPing Echo Reply. This can result in unexpected behaviors, especially for UDP based services that do not perform some form of authentication."}, {"lang": "es", "value": "En las plataformas afectadas que ejecutan Arista EOS, EOS podr\u00eda aceptar paquetes UDP maliciosos con el puerto de origen 3503. El puerto UDP 3503 est\u00e1 asociado con la respuesta de eco de LspPing. Esto puede provocar comportamientos inesperados, especialmente en servicios basados en UDP que no realizan ning\u00fan tipo de autenticaci\u00f3n."}], "lastModified": "2025-08-27T15:15:40.633", "sourceIdentifier": "psirt@arista.com"}