How severe is CVE-2021-28500?

CVE-2021-28500 has a CVSS v3 score of 9.1 (CRITICAL).

CVE-2021-28500

Name: eos
Author: arista

9.1CRITICAL

An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users

发布于: 1/14/2022更新于: 11/21/2024

描述

An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration.

AI分析AI驱动

受影响产品

aristaeos

参考资料

https://www.arista.com/en/support/advisories-notices/security-advisories/13449-security-advisory-0071
ExploitMitigationPatchVendor Advisory
https://www.arista.com/en/support/advisories-notices/security-advisories/13449-security-advisory-0071
ExploitMitigationPatchVendor Advisory