« Volver al listado

CVE-2021-28507

Estado: ModificadaAlta (7.1)—

An issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for OpenConfig gNOI and OpenConfig RESTCONF might be bypassed, which results in the denied requests being forwarded to the agent.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Arista — EOS

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-28507",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.9,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@arista.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 4.2,
        "exploitabilityScore": 1.2
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.1,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 4.2,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@arista.com",
      "affectedData": [
        {
          "vendor": "Arista Networks",
          "product": "EOS",
          "versions": [
            {
              "status": "affected",
              "version": "4.22.x"
            },
            {
              "status": "affected",
              "version": "4.26.2F",
              "versionType": "custom",
              "lessThanOrEqual": "4.26.0"
            },
            {
              "status": "affected",
              "version": "4.25.5.1M",
              "versionType": "custom",
              "lessThanOrEqual": "4.25.5"
            },
            {
              "status": "affected",
              "version": "4.25.4M",
              "versionType": "custom",
              "lessThanOrEqual": "4.25.4"
            },
            {
              "status": "affected",
              "version": "4.25.3",
              "versionType": "custom",
              "lessThanOrEqual": "4.25.0"
            },
            {
              "status": "affected",
              "version": "4.24.7M",
              "versionType": "custom",
              "lessThanOrEqual": "4.24.0"
            },
            {
              "status": "affected",
              "version": "4.23.9M",
              "versionType": "custom",
              "lessThanOrEqual": "4.23.0"
            },
            {
              "status": "affected",
              "version": "4.21.x",
              "versionType": "custom",
              "lessThanOrEqual": "4.21.x"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-01-14T20:15:10.383",
  "references": [
    {
      "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/13449-security-advisory-0071",
      "tags": [
        "Exploit",
        "Mitigation",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@arista.com"
    },
    {
      "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/13449-security-advisory-0071",
      "tags": [
        "Exploit",
        "Mitigation",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@arista.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for OpenConfig gNOI and OpenConfig RESTCONF might be bypassed, which results in the denied requests being forwarded to the agent."
    },
    {
      "lang": "es",
      "value": "Se ha detectado recientemente un problema en Arista EOS donde, bajo determinadas condiciones, la ACL de servicio configurada para OpenConfig gNOI y OpenConfig RESTCONF podría saltarse, lo que hace que las peticiones denegadas se reenvíen al agente"
    }
  ],
  "lastModified": "2026-06-17T03:46:29.230",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "37BF0DDF-3D2C-4B74-A71B-4A26CE66584F",
              "versionEndIncluding": "4.23.9m",
              "versionStartIncluding": "4.23.0"
            },
            {
              "criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3753CA4E-E3ED-43AC-BD9B-0F41C274EE42",
              "versionEndIncluding": "4.24.7m",
              "versionStartIncluding": "4.24.0"
            },
            {
              "criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2DCCC623-E1C2-4E97-B5B4-87B15F596334",
              "versionEndIncluding": "4.25.3",
              "versionStartIncluding": "4.25.0"
            },
            {
              "criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A0144E14-840C-4B5C-9FDF-E090ECC33B9A",
              "versionEndIncluding": "4.25.4m",
              "versionStartIncluding": "4.25.4"
            },
            {
              "criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2D8887C7-7FE8-4CBC-BEE9-1F202E626A0C",
              "versionEndIncluding": "4.25.5.1m",
              "versionStartIncluding": "4.25.5"
            },
            {
              "criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "361E664D-9F0D-478D-A2F6-F8001F464B0A",
              "versionEndIncluding": "4.26.2f",
              "versionStartIncluding": "4.26.0"
            },
            {
              "criteria": "cpe:2.3:o:arista:eos:4.21.0f:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FDA321EA-682B-4A73-9503-FBD27008CD81"
            },
            {
              "criteria": "cpe:2.3:o:arista:eos:4.21.1f:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8C0E814D-7B50-4A14-BA5D-2E29DD84FAB7"
            },
            {
              "criteria": "cpe:2.3:o:arista:eos:4.21.3f:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "429FD7A6-BB8F-4B57-BC72-D79ADF6E3656"
            },
            {
              "criteria": "cpe:2.3:o:arista:eos:4.22.0f:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D46ABF9-1F09-43C0-93C4-C9AA7245D0F6"
            },
            {
              "criteria": "cpe:2.3:o:arista:eos:4.22.1f:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B05A1D5-D833-4E4D-BC39-236F5BFC7918"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@arista.com"
}