Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-28500

An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.7%
CVSS Severity
CVSS v3 Score 9.1
CVSS v2 Score 6.9
Products affected by CVE-2021-28500
  • Arista » Eos » Version: Any
    cpe:2.3:o:arista:eos:*
  • Arista » Eos » Version: N/A
    cpe:2.3:o:arista:eos:-
  • Arista » Eos » Version: 4.10.0
    cpe:2.3:o:arista:eos:4.10.0
  • Arista » Eos » Version: 4.10.9
    cpe:2.3:o:arista:eos:4.10.9
  • Arista » Eos » Version: 4.11.0
    cpe:2.3:o:arista:eos:4.11.0
  • Arista » Eos » Version: 4.11.11
    cpe:2.3:o:arista:eos:4.11.11
  • Arista » Eos » Version: 4.12
    cpe:2.3:o:arista:eos:4.12
  • Arista » Eos » Version: 4.12.0
    cpe:2.3:o:arista:eos:4.12.0
  • Arista » Eos » Version: 4.12.9
    cpe:2.3:o:arista:eos:4.12.9
  • Arista » Eos » Version: 4.13
    cpe:2.3:o:arista:eos:4.13
  • Arista » Eos » Version: 4.13.0
    cpe:2.3:o:arista:eos:4.13.0
  • Arista » Eos » Version: 4.13.9
    cpe:2.3:o:arista:eos:4.13.9
  • Arista » Eos » Version: 4.14
    cpe:2.3:o:arista:eos:4.14
  • Arista » Eos » Version: 4.14.0
    cpe:2.3:o:arista:eos:4.14.0
  • Arista » Eos » Version: 4.15
    cpe:2.3:o:arista:eos:4.15
  • Arista » Eos » Version: 4.15.3f
    cpe:2.3:o:arista:eos:4.15.3f
  • Arista » Eos » Version: 4.16
    cpe:2.3:o:arista:eos:4.16
  • Arista » Eos » Version: 4.16.10m
    cpe:2.3:o:arista:eos:4.16.10m
  • Arista » Eos » Version: 4.16.11m
    cpe:2.3:o:arista:eos:4.16.11m
  • Arista » Eos » Version: 4.16.12m
    cpe:2.3:o:arista:eos:4.16.12m
  • Arista » Eos » Version: 4.16.13m
    cpe:2.3:o:arista:eos:4.16.13m
  • Arista » Eos » Version: 4.16.6m
    cpe:2.3:o:arista:eos:4.16.6m
  • Arista » Eos » Version: 4.16.7m
    cpe:2.3:o:arista:eos:4.16.7m
  • Arista » Eos » Version: 4.16.8m
    cpe:2.3:o:arista:eos:4.16.8m
  • Arista » Eos » Version: 4.16.9m
    cpe:2.3:o:arista:eos:4.16.9m
  • Arista » Eos » Version: 4.17
    cpe:2.3:o:arista:eos:4.17
  • Arista » Eos » Version: 4.17.0
    cpe:2.3:o:arista:eos:4.17.0
  • Arista » Eos » Version: 4.17.0f
    cpe:2.3:o:arista:eos:4.17.0f
  • Arista » Eos » Version: 4.17.1.1f
    cpe:2.3:o:arista:eos:4.17.1.1f
  • Arista » Eos » Version: 4.17.1.4f
    cpe:2.3:o:arista:eos:4.17.1.4f
  • Arista » Eos » Version: 4.17.1f
    cpe:2.3:o:arista:eos:4.17.1f
  • Arista » Eos » Version: 4.17.2.1f
    cpe:2.3:o:arista:eos:4.17.2.1f
  • Arista » Eos » Version: 4.17.2f
    cpe:2.3:o:arista:eos:4.17.2f
  • Arista » Eos » Version: 4.17.3f
    cpe:2.3:o:arista:eos:4.17.3f
  • Arista » Eos » Version: 4.17.4m
    cpe:2.3:o:arista:eos:4.17.4m
  • Arista » Eos » Version: 4.17.5.1m
    cpe:2.3:o:arista:eos:4.17.5.1m
  • Arista » Eos » Version: 4.17.5m
    cpe:2.3:o:arista:eos:4.17.5m
  • Arista » Eos » Version: 4.17.6m
    cpe:2.3:o:arista:eos:4.17.6m
  • Arista » Eos » Version: 4.17.7m
    cpe:2.3:o:arista:eos:4.17.7m
  • Arista » Eos » Version: 4.17.8m
    cpe:2.3:o:arista:eos:4.17.8m
  • Arista » Eos » Version: 4.18
    cpe:2.3:o:arista:eos:4.18
  • Arista » Eos » Version: 4.18.0f
    cpe:2.3:o:arista:eos:4.18.0f
  • Arista » Eos » Version: 4.18.1.1f
    cpe:2.3:o:arista:eos:4.18.1.1f
  • Arista » Eos » Version: 4.18.1f
    cpe:2.3:o:arista:eos:4.18.1f
  • Arista » Eos » Version: 4.18.2.1f
    cpe:2.3:o:arista:eos:4.18.2.1f
  • Arista » Eos » Version: 4.18.2f
    cpe:2.3:o:arista:eos:4.18.2f
  • Arista » Eos » Version: 4.18.3.1f
    cpe:2.3:o:arista:eos:4.18.3.1f
  • Arista » Eos » Version: 4.18.3f
    cpe:2.3:o:arista:eos:4.18.3f
  • Arista » Eos » Version: 4.18.4.1f
    cpe:2.3:o:arista:eos:4.18.4.1f
  • Arista » Eos » Version: 4.18.4.2f
    cpe:2.3:o:arista:eos:4.18.4.2f
  • Arista » Eos » Version: 4.18.4f
    cpe:2.3:o:arista:eos:4.18.4f
  • Arista » Eos » Version: 4.19
    cpe:2.3:o:arista:eos:4.19
  • Arista » Eos » Version: 4.19.4m
    cpe:2.3:o:arista:eos:4.19.4m
  • Arista » Eos » Version: 4.21.0
    cpe:2.3:o:arista:eos:4.21.0
  • Arista » Eos » Version: 4.21.0f
    cpe:2.3:o:arista:eos:4.21.0f
  • Arista » Eos » Version: 4.21.11m
    cpe:2.3:o:arista:eos:4.21.11m
  • Arista » Eos » Version: 4.21.12m
    cpe:2.3:o:arista:eos:4.21.12m
  • Arista » Eos » Version: 4.21.13m
    cpe:2.3:o:arista:eos:4.21.13m
  • Arista » Eos » Version: 4.21.14m
    cpe:2.3:o:arista:eos:4.21.14m
  • Arista » Eos » Version: 4.21.1f
    cpe:2.3:o:arista:eos:4.21.1f
  • Arista » Eos » Version: 4.21.2.4
    cpe:2.3:o:arista:eos:4.21.2.4
  • Arista » Eos » Version: 4.21.3
    cpe:2.3:o:arista:eos:4.21.3
  • Arista » Eos » Version: 4.21.3f
    cpe:2.3:o:arista:eos:4.21.3f
  • Arista » Eos » Version: 4.21.4.1f
    cpe:2.3:o:arista:eos:4.21.4.1f
  • Arista » Eos » Version: 4.21.8
    cpe:2.3:o:arista:eos:4.21.8
  • Arista » Eos » Version: 4.21.8m
    cpe:2.3:o:arista:eos:4.21.8m
  • Arista » Eos » Version: 4.21.9m
    cpe:2.3:o:arista:eos:4.21.9m
  • Arista » Eos » Version: 4.22.0f
    cpe:2.3:o:arista:eos:4.22.0f
  • Arista » Eos » Version: 4.22.1f
    cpe:2.3:o:arista:eos:4.22.1f
  • Arista » Eos » Version: 4.22.3m
    cpe:2.3:o:arista:eos:4.22.3m
  • Arista » Eos » Version: 4.22.4m
    cpe:2.3:o:arista:eos:4.22.4m
  • Arista » Eos » Version: 4.22.6m
    cpe:2.3:o:arista:eos:4.22.6m
  • Arista » Eos » Version: 4.22.7m
    cpe:2.3:o:arista:eos:4.22.7m
  • Arista » Eos » Version: 4.22.8.1f
    cpe:2.3:o:arista:eos:4.22.8.1f
  • Arista » Eos » Version: 4.22.9m
    cpe:2.3:o:arista:eos:4.22.9m
  • Arista » Eos » Version: 4.23.0f
    cpe:2.3:o:arista:eos:4.23.0f
  • Arista » Eos » Version: 4.23.1f
    cpe:2.3:o:arista:eos:4.23.1f
  • Arista » Eos » Version: 4.23.2f
    cpe:2.3:o:arista:eos:4.23.2f
  • Arista » Eos » Version: 4.23.3m
    cpe:2.3:o:arista:eos:4.23.3m
  • Arista » Eos » Version: 4.23.4m
    cpe:2.3:o:arista:eos:4.23.4m
  • Arista » Eos » Version: 4.23.5m
    cpe:2.3:o:arista:eos:4.23.5m
  • Arista » Eos » Version: 4.23.6m
    cpe:2.3:o:arista:eos:4.23.6m
  • Arista » Eos » Version: 4.23.7m
    cpe:2.3:o:arista:eos:4.23.7m
  • Arista » Eos » Version: 4.25.0
    cpe:2.3:o:arista:eos:4.25.0
  • Arista » Eos » Version: 4.25.0f
    cpe:2.3:o:arista:eos:4.25.0f
  • Arista » Eos » Version: 4.25.1f
    cpe:2.3:o:arista:eos:4.25.1f
  • Arista » Eos » Version: 4.25.2f
    cpe:2.3:o:arista:eos:4.25.2f
  • Arista » Eos » Version: 4.25.4
    cpe:2.3:o:arista:eos:4.25.4
  • Arista » Eos » Version: 4.26.0
    cpe:2.3:o:arista:eos:4.26.0
  • Arista » Eos » Version: 4.26.1
    cpe:2.3:o:arista:eos:4.26.1
  • Arista » Eos » Version: 4.26.1f
    cpe:2.3:o:arista:eos:4.26.1f
  • Arista » Eos » Version: 4.9.0
    cpe:2.3:o:arista:eos:4.9.0
  • Arista » Eos » Version: 4.9.12
    cpe:2.3:o:arista:eos:4.9.12


Contact Us

Shodan ® - All rights reserved