CVE-2026-73446: Security Advisory 0160
On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can send a crafted IS-IS Hello Protocol Data Unit (PDU) that causes the device to tear down an established IS-IS adjacency. This may result in traffic disruption and loss of IP reachability for prefixes advertised through that adjacency.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Affected Arista EOS platforms are exposed when IS-IS is configured on a broadcast interface and an established IS-IS adjacency is present on that interface.
What does an attacker need to exploit it?
An attacker does not need authentication, user interaction, or prior privileges. They need to be able to send a crafted IS-IS Hello PDU to the affected broadcast interface.
What is the operational impact of a successful attack?
The crafted PDU can tear down an established IS-IS adjacency. This can disrupt traffic and remove IP reachability to prefixes advertised through that adjacency.