← CVE Intelligence

CVE-2021-28500

An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration. PUBLISHED

Description (CNA)

An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration.

Affected (CNA)

Vendor / productVersions
Arista Networks / Arista EOSaffected 4.26.1F through 4.26.0; affected 4.25.4.M through 4.25.0; affected 4.24.6M through 4.24.6.0; affected 4.23.8M through 4.23.0; affected 4.22.11M through 4.22.0; affected 4.21.14M through 4.21.0; affected 4.20 before 0

CWE

CWE-285

References

ADP enrichment

CVE

No English description supplied.