Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-28511

This advisory documents the impact of an internally found vulnerability in Arista EOS for security ACL bypass. The impact of this vulnerability is that the security ACL drop rule might be bypassed if a NAT ACL rule filter with permit action matches the packet flow. This could allow a host with an IP address in a range that matches the range allowed by a NAT ACL and a range denied by a Security ACL to be forwarded incorrectly as it should have been denied by the Security ACL. This can enable an ACL bypass.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 17.7%
CVSS Severity
CVSS v3 Score 5.8
Products affected by CVE-2021-28511
  • Arista » 7050cx3-32s » Version: N/A
    cpe:2.3:h:arista:7050cx3-32s:-
  • Arista » 7050cx3m-32s » Version: N/A
    cpe:2.3:h:arista:7050cx3m-32s:-
  • Arista » 7050sx3-48c8 » Version: N/A
    cpe:2.3:h:arista:7050sx3-48c8:-
  • Arista » 7050sx3-48yc12 » Version: N/A
    cpe:2.3:h:arista:7050sx3-48yc12:-
  • Arista » 7050sx3-48yc8 » Version: N/A
    cpe:2.3:h:arista:7050sx3-48yc8:-
  • Arista » 7050sx3-48yc » Version: N/A
    cpe:2.3:h:arista:7050sx3-48yc:-
  • Arista » 7050sx3-96yc8 » Version: N/A
    cpe:2.3:h:arista:7050sx3-96yc8:-
  • Arista » 7050tx3-48c8 » Version: N/A
    cpe:2.3:h:arista:7050tx3-48c8:-
  • Arista » 720xp-24y6 » Version: N/A
    cpe:2.3:h:arista:720xp-24y6:-
  • Arista » 720xp-24zy4 » Version: N/A
    cpe:2.3:h:arista:720xp-24zy4:-
  • Arista » 720xp-48y6 » Version: N/A
    cpe:2.3:h:arista:720xp-48y6:-
  • Arista » 720xp-48zc2 » Version: N/A
    cpe:2.3:h:arista:720xp-48zc2:-
  • Arista » 720xp-96zc2 » Version: N/A
    cpe:2.3:h:arista:720xp-96zc2:-
  • Arista » 7300x3-32c » Version: N/A
    cpe:2.3:h:arista:7300x3-32c:-
  • Arista » 7300x3-48yc4 » Version: N/A
    cpe:2.3:h:arista:7300x3-48yc4:-
  • Arista » Eos » Version: N/A
    cpe:2.3:o:arista:eos:-
  • Arista » Eos » Version: 4.10.0
    cpe:2.3:o:arista:eos:4.10.0
  • Arista » Eos » Version: 4.10.9
    cpe:2.3:o:arista:eos:4.10.9
  • Arista » Eos » Version: 4.11.0
    cpe:2.3:o:arista:eos:4.11.0
  • Arista » Eos » Version: 4.11.11
    cpe:2.3:o:arista:eos:4.11.11
  • Arista » Eos » Version: 4.12
    cpe:2.3:o:arista:eos:4.12
  • Arista » Eos » Version: 4.12.0
    cpe:2.3:o:arista:eos:4.12.0
  • Arista » Eos » Version: 4.12.9
    cpe:2.3:o:arista:eos:4.12.9
  • Arista » Eos » Version: 4.13
    cpe:2.3:o:arista:eos:4.13
  • Arista » Eos » Version: 4.13.0
    cpe:2.3:o:arista:eos:4.13.0
  • Arista » Eos » Version: 4.13.9
    cpe:2.3:o:arista:eos:4.13.9
  • Arista » Eos » Version: 4.14
    cpe:2.3:o:arista:eos:4.14
  • Arista » Eos » Version: 4.14.0
    cpe:2.3:o:arista:eos:4.14.0
  • Arista » Eos » Version: 4.15
    cpe:2.3:o:arista:eos:4.15
  • Arista » Eos » Version: 4.15.3f
    cpe:2.3:o:arista:eos:4.15.3f
  • Arista » Eos » Version: 4.16
    cpe:2.3:o:arista:eos:4.16
  • Arista » Eos » Version: 4.16.10m
    cpe:2.3:o:arista:eos:4.16.10m
  • Arista » Eos » Version: 4.16.11m
    cpe:2.3:o:arista:eos:4.16.11m
  • Arista » Eos » Version: 4.16.12m
    cpe:2.3:o:arista:eos:4.16.12m
  • Arista » Eos » Version: 4.16.13m
    cpe:2.3:o:arista:eos:4.16.13m
  • Arista » Eos » Version: 4.16.6m
    cpe:2.3:o:arista:eos:4.16.6m
  • Arista » Eos » Version: 4.16.7m
    cpe:2.3:o:arista:eos:4.16.7m
  • Arista » Eos » Version: 4.16.8m
    cpe:2.3:o:arista:eos:4.16.8m
  • Arista » Eos » Version: 4.16.9m
    cpe:2.3:o:arista:eos:4.16.9m
  • Arista » Eos » Version: 4.17
    cpe:2.3:o:arista:eos:4.17
  • Arista » Eos » Version: 4.17.0
    cpe:2.3:o:arista:eos:4.17.0
  • Arista » Eos » Version: 4.17.0f
    cpe:2.3:o:arista:eos:4.17.0f
  • Arista » Eos » Version: 4.17.1.1f
    cpe:2.3:o:arista:eos:4.17.1.1f
  • Arista » Eos » Version: 4.17.1.4f
    cpe:2.3:o:arista:eos:4.17.1.4f
  • Arista » Eos » Version: 4.17.1f
    cpe:2.3:o:arista:eos:4.17.1f
  • Arista » Eos » Version: 4.17.2.1f
    cpe:2.3:o:arista:eos:4.17.2.1f
  • Arista » Eos » Version: 4.17.2f
    cpe:2.3:o:arista:eos:4.17.2f
  • Arista » Eos » Version: 4.17.3f
    cpe:2.3:o:arista:eos:4.17.3f
  • Arista » Eos » Version: 4.17.4m
    cpe:2.3:o:arista:eos:4.17.4m
  • Arista » Eos » Version: 4.17.5.1m
    cpe:2.3:o:arista:eos:4.17.5.1m
  • Arista » Eos » Version: 4.17.5m
    cpe:2.3:o:arista:eos:4.17.5m
  • Arista » Eos » Version: 4.17.6m
    cpe:2.3:o:arista:eos:4.17.6m
  • Arista » Eos » Version: 4.17.7m
    cpe:2.3:o:arista:eos:4.17.7m
  • Arista » Eos » Version: 4.17.8m
    cpe:2.3:o:arista:eos:4.17.8m
  • Arista » Eos » Version: 4.18
    cpe:2.3:o:arista:eos:4.18
  • Arista » Eos » Version: 4.18.0f
    cpe:2.3:o:arista:eos:4.18.0f
  • Arista » Eos » Version: 4.18.1.1f
    cpe:2.3:o:arista:eos:4.18.1.1f
  • Arista » Eos » Version: 4.18.1f
    cpe:2.3:o:arista:eos:4.18.1f
  • Arista » Eos » Version: 4.18.2.1f
    cpe:2.3:o:arista:eos:4.18.2.1f
  • Arista » Eos » Version: 4.18.2f
    cpe:2.3:o:arista:eos:4.18.2f
  • Arista » Eos » Version: 4.18.3.1f
    cpe:2.3:o:arista:eos:4.18.3.1f
  • Arista » Eos » Version: 4.18.3f
    cpe:2.3:o:arista:eos:4.18.3f
  • Arista » Eos » Version: 4.18.4.1f
    cpe:2.3:o:arista:eos:4.18.4.1f
  • Arista » Eos » Version: 4.18.4.2f
    cpe:2.3:o:arista:eos:4.18.4.2f
  • Arista » Eos » Version: 4.18.4f
    cpe:2.3:o:arista:eos:4.18.4f
  • Arista » Eos » Version: 4.19
    cpe:2.3:o:arista:eos:4.19
  • Arista » Eos » Version: 4.19.4m
    cpe:2.3:o:arista:eos:4.19.4m
  • Arista » Eos » Version: 4.20
    cpe:2.3:o:arista:eos:4.20
  • Arista » Eos » Version: 4.20.1
    cpe:2.3:o:arista:eos:4.20.1
  • Arista » Eos » Version: 4.20.15
    cpe:2.3:o:arista:eos:4.20.15
  • Arista » Eos » Version: 4.20.1f
    cpe:2.3:o:arista:eos:4.20.1f
  • Arista » Eos » Version: 4.20.2f
    cpe:2.3:o:arista:eos:4.20.2f
  • Arista » Eos » Version: 4.20.4.1
    cpe:2.3:o:arista:eos:4.20.4.1
  • Arista » Eos » Version: 4.20.5
    cpe:2.3:o:arista:eos:4.20.5
  • Arista » Eos » Version: 4.20.5f
    cpe:2.3:o:arista:eos:4.20.5f
  • Arista » Eos » Version: 4.21
    cpe:2.3:o:arista:eos:4.21
  • Arista » Eos » Version: 4.21.0
    cpe:2.3:o:arista:eos:4.21.0
  • Arista » Eos » Version: 4.21.0f
    cpe:2.3:o:arista:eos:4.21.0f
  • Arista » Eos » Version: 4.21.11m
    cpe:2.3:o:arista:eos:4.21.11m
  • Arista » Eos » Version: 4.21.12m
    cpe:2.3:o:arista:eos:4.21.12m
  • Arista » Eos » Version: 4.21.13m
    cpe:2.3:o:arista:eos:4.21.13m
  • Arista » Eos » Version: 4.21.14m
    cpe:2.3:o:arista:eos:4.21.14m
  • Arista » Eos » Version: 4.21.1f
    cpe:2.3:o:arista:eos:4.21.1f
  • Arista » Eos » Version: 4.21.2.4
    cpe:2.3:o:arista:eos:4.21.2.4
  • Arista » Eos » Version: 4.21.3
    cpe:2.3:o:arista:eos:4.21.3
  • Arista » Eos » Version: 4.21.3f
    cpe:2.3:o:arista:eos:4.21.3f
  • Arista » Eos » Version: 4.21.4.1f
    cpe:2.3:o:arista:eos:4.21.4.1f
  • Arista » Eos » Version: 4.21.8
    cpe:2.3:o:arista:eos:4.21.8
  • Arista » Eos » Version: 4.21.8m
    cpe:2.3:o:arista:eos:4.21.8m
  • Arista » Eos » Version: 4.21.9m
    cpe:2.3:o:arista:eos:4.21.9m
  • Arista » Eos » Version: 4.22
    cpe:2.3:o:arista:eos:4.22
  • Arista » Eos » Version: 4.22.0f
    cpe:2.3:o:arista:eos:4.22.0f
  • Arista » Eos » Version: 4.22.1f
    cpe:2.3:o:arista:eos:4.22.1f
  • Arista » Eos » Version: 4.22.3m
    cpe:2.3:o:arista:eos:4.22.3m
  • Arista » Eos » Version: 4.22.4m
    cpe:2.3:o:arista:eos:4.22.4m
  • Arista » Eos » Version: 4.22.6m
    cpe:2.3:o:arista:eos:4.22.6m
  • Arista » Eos » Version: 4.22.7m
    cpe:2.3:o:arista:eos:4.22.7m
  • Arista » Eos » Version: 4.22.8.1f
    cpe:2.3:o:arista:eos:4.22.8.1f
  • Arista » Eos » Version: 4.22.9m
    cpe:2.3:o:arista:eos:4.22.9m
  • Arista » Eos » Version: 4.23
    cpe:2.3:o:arista:eos:4.23
  • Arista » Eos » Version: 4.23.0f
    cpe:2.3:o:arista:eos:4.23.0f
  • Arista » Eos » Version: 4.23.10
    cpe:2.3:o:arista:eos:4.23.10
  • Arista » Eos » Version: 4.23.13m
    cpe:2.3:o:arista:eos:4.23.13m
  • Arista » Eos » Version: 4.23.1f
    cpe:2.3:o:arista:eos:4.23.1f
  • Arista » Eos » Version: 4.23.2f
    cpe:2.3:o:arista:eos:4.23.2f
  • Arista » Eos » Version: 4.23.3m
    cpe:2.3:o:arista:eos:4.23.3m
  • Arista » Eos » Version: 4.23.4m
    cpe:2.3:o:arista:eos:4.23.4m
  • Arista » Eos » Version: 4.23.5m
    cpe:2.3:o:arista:eos:4.23.5m
  • Arista » Eos » Version: 4.23.6m
    cpe:2.3:o:arista:eos:4.23.6m
  • Arista » Eos » Version: 4.23.7m
    cpe:2.3:o:arista:eos:4.23.7m
  • Arista » Eos » Version: 4.23.9
    cpe:2.3:o:arista:eos:4.23.9
  • Arista » Eos » Version: 4.23.9m
    cpe:2.3:o:arista:eos:4.23.9m
  • Arista » Eos » Version: 4.24
    cpe:2.3:o:arista:eos:4.24
  • Arista » Eos » Version: 4.24.0
    cpe:2.3:o:arista:eos:4.24.0
  • Arista » Eos » Version: 4.24.0f
    cpe:2.3:o:arista:eos:4.24.0f
  • Arista » Eos » Version: 4.24.2.1f
    cpe:2.3:o:arista:eos:4.24.2.1f
  • Arista » Eos » Version: 4.24.2.4f
    cpe:2.3:o:arista:eos:4.24.2.4f
  • Arista » Eos » Version: 4.24.2f
    cpe:2.3:o:arista:eos:4.24.2f
  • Arista » Eos » Version: 4.24.3.1m
    cpe:2.3:o:arista:eos:4.24.3.1m
  • Arista » Eos » Version: 4.24.5m
    cpe:2.3:o:arista:eos:4.24.5m
  • Arista » Eos » Version: 4.24.7
    cpe:2.3:o:arista:eos:4.24.7
  • Arista » Eos » Version: 4.24.7m
    cpe:2.3:o:arista:eos:4.24.7m
  • Arista » Eos » Version: 4.24.8
    cpe:2.3:o:arista:eos:4.24.8
  • Arista » Eos » Version: 4.24.9
    cpe:2.3:o:arista:eos:4.24.9
  • Arista » Eos » Version: 4.25.0
    cpe:2.3:o:arista:eos:4.25.0
  • Arista » Eos » Version: 4.25.0f
    cpe:2.3:o:arista:eos:4.25.0f
  • Arista » Eos » Version: 4.25.1f
    cpe:2.3:o:arista:eos:4.25.1f
  • Arista » Eos » Version: 4.25.2f
    cpe:2.3:o:arista:eos:4.25.2f
  • Arista » Eos » Version: 4.25.4
    cpe:2.3:o:arista:eos:4.25.4
  • Arista » Eos » Version: 4.25.5
    cpe:2.3:o:arista:eos:4.25.5
  • Arista » Eos » Version: 4.25.5.1m
    cpe:2.3:o:arista:eos:4.25.5.1m
  • Arista » Eos » Version: 4.25.6
    cpe:2.3:o:arista:eos:4.25.6
  • Arista » Eos » Version: 4.25.8
    cpe:2.3:o:arista:eos:4.25.8
  • Arista » Eos » Version: 4.26.0
    cpe:2.3:o:arista:eos:4.26.0
  • Arista » Eos » Version: 4.26.1
    cpe:2.3:o:arista:eos:4.26.1
  • Arista » Eos » Version: 4.26.1f
    cpe:2.3:o:arista:eos:4.26.1f
  • Arista » Eos » Version: 4.26.2
    cpe:2.3:o:arista:eos:4.26.2
  • Arista » Eos » Version: 4.26.2f
    cpe:2.3:o:arista:eos:4.26.2f
  • Arista » Eos » Version: 4.26.3m
    cpe:2.3:o:arista:eos:4.26.3m
  • Arista » Eos » Version: 4.26.4
    cpe:2.3:o:arista:eos:4.26.4
  • Arista » Eos » Version: 4.26.4m
    cpe:2.3:o:arista:eos:4.26.4m
  • Arista » Eos » Version: 4.26.5
    cpe:2.3:o:arista:eos:4.26.5
  • Arista » Eos » Version: 4.27.0
    cpe:2.3:o:arista:eos:4.27.0
  • Arista » Eos » Version: 4.27.0f
    cpe:2.3:o:arista:eos:4.27.0f
  • Arista » Eos » Version: 4.27.1
    cpe:2.3:o:arista:eos:4.27.1
  • Arista » Eos » Version: 4.27.1f
    cpe:2.3:o:arista:eos:4.27.1f
  • Arista » Eos » Version: 4.27.3
    cpe:2.3:o:arista:eos:4.27.3
  • Arista » Eos » Version: 4.9.0
    cpe:2.3:o:arista:eos:4.9.0
  • Arista » Eos » Version: 4.9.12
    cpe:2.3:o:arista:eos:4.9.12


Contact Us

Shodan ® - All rights reserved