VULNERABILITY INTELLIGENCE

CVE-2021-28501

CVSS score9.1 CRITICAL
EPSS probability0.84%
CISA KEVNot currently listed
Published2022-01-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Description

An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration.

Weakness classification

  • psirt@arista.com: CWE-285
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references