Detections
Analytics

Arista Networks EOS P4Runtime Arbitrary Code Execution (SA0174)

critical Nessus Plugin ID 346257

Language:

Synopsis

The version of Arista Networks EOS running on the remote device is affected by a code injection vulnerability.

Description

The version of Arista Networks EOS running on the remote device is affected by a code injection vulnerability as referenced in security advisory SA0174.

 - An unauthenticated P4Runtime (Programming Protocol-Independent Packet Processors Runtime) client can achieve arbitrary code execution under certain conditions on affected platforms running Arista EOS configured with P4Runtime. By crafting a malicious packet during the initiation of a P4Runtime session, an attacker can obtain complete administrative control over the compromised switch. (CVE-2026-73453)

Note that P4Runtime is disabled by default in Arista EOS. Nessus has not checked the P4Runtime configuration and has instead relied only on the application's self-reported version number.

Solution

Upgrade to Arista Networks EOS 4.34.8M / 4.35.6M / 4.36.2F or later, or apply the mitigation referenced in the vendor advisory.

See Also

http://www.nessus.org/u?f41c0251

Plugin Details

Severity: Critical

ID: 346257

File Name: arista_eos_sa0174.nasl

Version: 1.2

Type: Combined

Family: Misc.

Published: 9/16/2026

Updated: 9/17/2026

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5

Percentile: 93.34

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-73453

CVSS v3

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS v4

Risk Factor: Critical

Base Score: 9.5

Threat Score: 8.4

Threat Vector: CVSS:4.0/E:U

Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Vulnerability Information

CPE: cpe:/o:arista:eos

Required KB Items: Settings/ParanoidReport, Host/Arista-EOS/Version

Exploit Ease: No known exploits are available

Patch Publication Date: 9/9/2026

Vulnerability Publication Date: 9/9/2026

Reference Information

CVE: CVE-2026-73453