← CVE Intelligence

CVE-2021-28506

An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device. PUBLISHED

Description (CNA)

An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device.

Affected (CNA)

Vendor / productVersions
Arista Networks / EOSaffected 4.26.2F through 4.26.0; affected 4.25.5.1M through 4.25.5; affected 4.25.4M through 4.25.4; affected 4.25.3 through 4.25.0; affected 4.24.7M through 4.24.2F

CWE

CWE-285

References

ADP enrichment

CVE

No English description supplied.