CVE-2021-28501
9.1CRITICALAn issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users
Publicado: 1/14/2022Atualizado: 11/21/2024
Descrição
An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration.
Análise IADesenvolvido por IA
Produtos Afetados
aristaterminattr
Referências
- https://www.arista.com/en/support/advisories-notices/security-advisories/13449-security-advisory-0071ExploitMitigationPatchVendor Advisory
- https://www.arista.com/en/support/advisories-notices/security-advisories/13449-security-advisory-0071ExploitMitigationPatchVendor Advisory