Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2021-28506

An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Arista

Description

An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Arista Networks EOS

  • 4.26.2F to ≤ 4.26.0affected
  • 4.25.5.1M to ≤ 4.25.5affected
  • 4.25.4M to ≤ 4.25.4affected
  • 4.25.3 to ≤ 4.25.0affected
  • 4.24.7M to ≤ 4.24.2Faffected

References