CVE-2026-120977: Security Advisory 0217

Published Nov 10, 2026

Updated

On affected platforms running Arista EOS with 802.1X with Dynamic Host Configuration Protocol (DHCP) device profiling enabled, a network-adjacent attacker can send a crafted DHCP packet to force the device to record a spoofed device profile. This may potentially allow the authenticated supplicant to acquire unauthorized access to a network segment with elevated privileges.

Affected Software

1 affected component

Arista EOS

Event History

Nov 10, 2026

CVE Published

via MITRE·08:09 PM

Data Sourced

via MITRE·08:09 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed to this issue?

Affected Arista EOS platforms are exposed when 802.1X is configured with DHCP device profiling enabled. The attack is network-adjacent, so exposure depends on an attacker being able to send DHCP traffic to the device.

What does an attacker need to exploit it?

The attacker does not need privileges or user interaction. They need network-adjacent access and must send a crafted DHCP packet that causes the device to record a spoofed device profile.

What is the likely impact of a successful attack?

A spoofed device profile may allow an authenticated supplicant to obtain unauthorized access to a network segment with elevated privileges. The provided severity vector indicates high integrity impact and low confidentiality impact, with no availability impact.

CVE-2026-120977: Security Advisory 0217

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to exploit it?

What is the likely impact of a successful attack?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to exploit it?

What is the likely impact of a successful attack?