NetSight
critical9.1

CVE-2021-28506

An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a f…

Impact

An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device.

Affected products

VendorProductAffected versions
AristaEos
from 4.24.0 through 4.24.7m
from 4.25.0 through 4.25.3
from 4.25.4 through 4.25.4m
from 4.25.5 through 4.25.5.1m
from 4.26.0 through 4.26.2f

Weakness classification

References