Unrated severityNVD Advisory· Published Feb 4, 2022· Updated Sep 16, 2024

In Arista's EOS software affected releases, eAPI might skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI.

CVE-2021-28503

Description

The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Arista/EOS eAPIllm-create
Arista Networks/Arista EOSv5
Range: EOS-4.23

Patches

Vulnerability mechanics

References

www.arista.com/en/support/advisories-notices/security-advisories/13605-security-advisory-0072mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000