← CVE Intelligence

CVE-2021-28501

An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration. PUBLISHED

Description (CNA)

An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration.

Affected (CNA)

Vendor / productVersions
Arista Networks / Terminattraffected 1.16.2 0

CWE

CWE-285

References

ADP enrichment

CVE

No English description supplied.