CVE-2024-12378 – Arista EOS Unencrypted VxLAN Tunnel Exposure

May 8, 2025

CVE ID : CVE-2024-12378

Published : May 8, 2025, 7:15 p.m. | 56 minutes ago

Description : On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear.

Severity: 9.1 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2024-11186 – Arista CloudVision Portal Elevated Privilege Access Vulnerability

Next Article CVE-2025-30102 – Dell PowerScale OneFS Out-of-Bounds Write Vulnerability

Agent Mode for Gemini added to Android Studio

Google’s Agent2Agent protocol finds new home at the Linux Foundation

Decoding The SVG path Element: Curve And Arc Commands

This week in AI dev tools: Gemini 2.5 Pro and Flash GA, GitHub Copilot Spaces, and more (June 20, 2025)

Microsoft is reportedly planning yet more major cuts at Xbox — as early as next week

Microsoft makes Windows 10 security updates FREE for an extra year — but there’s a catch, and you might not like it

“Deus Ex” just turned 25 years old and it’s still the best PC game of all time — you only need $2 to play it on practically anything

Where to buy a Meta Quest 3S Xbox Edition — and why it’s a better bargain than the “normal” Meta Quest 3S

Vite 7.0 Is Out

Vite 7.0 Is Out

Exploring JavaScript ES2025 Edition

Mastering Mixed DML Operations in Apex

Microsoft is reportedly planning yet more major cuts at Xbox — as early as next week

Microsoft is reportedly planning yet more major cuts at Xbox — as early as next week

Microsoft makes Windows 10 security updates FREE for an extra year — but there’s a catch, and you might not like it

“Deus Ex” just turned 25 years old and it’s still the best PC game of all time — you only need $2 to play it on practically anything

CVE-2024-12378 – Arista EOS Unencrypted VxLAN Tunnel Exposure

Critical Kaleris Navis N4 Flaw (CVE-2025-2566, CVSS 9.8): Supply Chain Infrastructure at Risk!

TeamViewer for Windows Vulnerability Let Attackers Delete Files Using SYSTEM Privileges

The WAVLab Team is Releases of VERSA: A Comprehensive and Versatile Evaluation Toolkit for Assessing Speech, Audio, and Music Signals

CVE-2025-45489 – Linksys E5600 Command Injection Vulnerability

Russian APT29 Exploits Gmail App Passwords to Bypass 2FA in Targeted Phishing Campaign

The Mainframe Muggle Chronicles – Part 2: A Heretic Among Zealots

CVE-2025-43855 – Apache tRPC WebSocket Server Crash Vulnerability (Denial of Service)

Tauon Music Player Adds Slick Transparency Mode for Linux

Microsoft says AI agents will make every employee an “agent boss” — after Bill Gates claimed AI will replace humans in most jobs

I managed to buy a Nintendo Switch 2 – and it’s easy to see why it’s flying off shelves

CVE-2024-12378 – Arista EOS Unencrypted VxLAN Tunnel Exposure

Related Posts