High severity7.4NVD Advisory· Published Feb 4, 2022· Updated Jun 17, 2026

CVE-2021-28503

Description

The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Arista/Eos
cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*
Range: >=4.22,<=4.22.9m
Arista/EOS eAPIllm-fuzzy
Arista Networks/Arista EOSv5
Range: EOS-4.23

Patches

Vulnerability mechanics

References

www.arista.com/en/support/advisories-notices/security-advisories/13605-security-advisory-0072nvdMitigationPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.481
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000