NetSight
high7.5

CVE-2021-28504

On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that…

Impact

On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol field as expected.

Affected products

VendorProductAffected versions
AristaEos
from 4.26 before 4.26.4m
from 4.27 before 4.27.1f

Weakness classification

References