high7.4
CVE-2021-28503
The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows …
Impact
The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arista | Eos | from 4.22 through 4.22.9m from 4.23 through 4.23.9 from 4.24 through 4.24.7 from 4.25 through 4.25.5 from 4.26 through 4.26.2 |