« Volver al listado

CVE-2021-28505

Estado: ModificadaAlta (7.5)—

On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL rules in that access list will ignore the specified IP protocol.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Arista — EOS

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-28505",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@arista.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@arista.com",
      "affectedData": [
        {
          "vendor": "Arista Networks",
          "product": "EOS",
          "versions": [
            {
              "status": "affected",
              "version": "4.26.3M",
              "versionType": "custom",
              "lessThanOrEqual": "4.26.0"
            },
            {
              "status": "affected",
              "version": "4.27.0F",
              "versionType": "custom",
              "lessThanOrEqual": "4.27.0"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-04-14T21:15:08.427",
  "references": [
    {
      "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "psirt@arista.com"
    },
    {
      "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@arista.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-863"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL rules in that access list will ignore the specified IP protocol."
    },
    {
      "lang": "es",
      "value": "En las plataformas Arista EOS afectadas, si se presenta una regla de coincidencia VXLAN en una lista de acceso IPv4 que es aplicada a la entrada de un puerto/SVI L2 o L3, la regla VXLAN y las reglas ACL posteriores en esa lista de acceso ignorarán el protocolo IP especificado"
    }
  ],
  "lastModified": "2026-06-17T03:46:28.943",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A8E9397-1B74-4A40-B8E3-7088A5A45749",
              "versionEndExcluding": "4.26.4m",
              "versionStartIncluding": "4.26"
            },
            {
              "criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F85F865B-F425-46DD-B9D4-C96AE100F39F",
              "versionEndExcluding": "4.27.1f",
              "versionStartIncluding": "4.27"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arista:ccs-710p-12:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3671762A-7E5C-47BF-AE10-64F19C82EEDF"
            },
            {
              "criteria": "cpe:2.3:h:arista:ccs-710p-16p:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "AC8C4306-2090-4170-B316-79613AA19392"
            },
            {
              "criteria": "cpe:2.3:h:arista:ccs-720xp-24y6:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "45460268-9775-4047-B36D-1A62480047C7"
            },
            {
              "criteria": "cpe:2.3:h:arista:ccs-720xp-24zy4:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7A3886D9-AB47-4E4B-95E6-39E31100FE62"
            },
            {
              "criteria": "cpe:2.3:h:arista:ccs-720xp-48y6:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4D21D207-AD0F-4745-B123-A7219DD6512F"
            },
            {
              "criteria": "cpe:2.3:h:arista:ccs-720xp-48zc2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B317039B-7365-4348-8286-39128C4B363F"
            },
            {
              "criteria": "cpe:2.3:h:arista:ccs-720xp-96zc2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2E58B31B-C6C1-4EDC-8D4F-1528C9B1CB8A"
            },
            {
              "criteria": "cpe:2.3:h:arista:ccs-722xpm-48y4:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "074CBF00-1D2C-4388-874A-62453B1D4564"
            },
            {
              "criteria": "cpe:2.3:h:arista:ccs-722xpm-48zy8:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D15C1D00-5F35-4F67-8075-D84D3BD9CE73"
            },
            {
              "criteria": "cpe:2.3:h:arista:dcs-7010tx-48:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9CB43CD4-C96F-483C-B743-3D81C9A65EDF"
            },
            {
              "criteria": "cpe:2.3:h:arista:dcs-7050cx3-32s:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E7C133EA-753A-4770-AEF8-11AC8E901F1A"
            },
            {
              "criteria": "cpe:2.3:h:arista:dcs-7050cx3m-32s:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5D11D6B9-1E68-4A65-A9CD-8DD299EC6B25"
            },
            {
              "criteria": "cpe:2.3:h:arista:dcs-7050sx3-48c8:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "11B7A876-587F-4C51-BE49-C82F6508C536"
            },
            {
              "criteria": "cpe:2.3:h:arista:dcs-7050sx3-48yc12:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EEB629B5-7E62-4972-A288-EF76FFA3E441"
            },
            {
              "criteria": "cpe:2.3:h:arista:dcs-7050sx3-48yc8:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "33079D44-2255-4682-A4BC-4B071D8EDCFA"
            },
            {
              "criteria": "cpe:2.3:h:arista:dcs-7050sx3-96yc8:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "69F1C5CA-19D7-4F40-93EB-97F44DCD5DCB"
            },
            {
              "criteria": "cpe:2.3:h:arista:dcs-7050tx3-48c8:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "418E2ED9-B9FC-438D-9F7C-8D6DB7E297AA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@arista.com"
}