Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2021-28507

An issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for OpenConfig gNOI and OpenConfig RESTCONF might be bypassed, which results in the denied requests being forwarded to the agent.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Arista

Description

An issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for OpenConfig gNOI and OpenConfig RESTCONF might be bypassed, which results in the denied requests being forwarded to the agent.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Arista Networks EOS

  • 4.22.xaffected
  • 4.26.2F to ≤ 4.26.0affected
  • 4.25.5.1M to ≤ 4.25.5affected
  • 4.25.4M to ≤ 4.25.4affected
  • 4.25.3 to ≤ 4.25.0affected
  • 4.24.7M to ≤ 4.24.0affected
  • 4.23.9M to ≤ 4.23.0affected
  • 4.21.x to ≤ 4.21.xaffected

References