CVE-2021-28503

{"containers": {"cna": {"affected": [{"product": "Arista EOS", "vendor": "Arista Networks", "versions": [{"lessThan": "EOS-4.23.10", "status": "affected", "version": "EOS-4.23", "versionType": "custom"}, {"lessThan": "EOS-4.24.8", "status": "affected", "version": "EOS-4.24", "versionType": "custom"}, {"lessThan": "EOS-4.25.6", "status": "affected", "version": "EOS-4.25", "versionType": "custom"}, {"lessThan": "EOS-4.26.3", "status": "affected", "version": "EOS-4.26", "versionType": "custom"}]}], "datePublic": "2022-02-02T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-305", "description": "CWE-305 Authentication Bypass by Primary Weakness", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-02-04T22:29:27.000Z", "orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/13605-security-advisory-0072"}], "solutions": [{"lang": "en", "value": "The recommended resolution is to upgrade to a remediated software version at your earliest convenience.\n\nThe vulnerability is fixed in the following EOS versions:\n 4.26.3 and later releases in the 4.26.x train\n 4.25.6 and later releases in the 4.25.x train\n 4.24.8 and later releases in the 4.24.x train\n 4.23.10 and later releases in the 4.24.x train"}], "source": {"advisory": "Security Advisory 0072", "defect": ["BUG606686"], "discovery": "INTERNAL"}, "title": "In Arista's EOS software affected releases, eAPI might skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI.", "workarounds": [{"lang": "en", "value": "Disallowing user certificate authentication via eAPI can be used to mitigate the vulnerability.\n\nswitch(config)#management security\nswitch(config-mgmt-security)#ssl profile profileEAPI\nswitch(config-mgmt-sec-ssl-profile-profileEAPI)#no trust certificate user.cert\nswitch(config-mgmt-sec-ssl-profile-profileEAPI)#exit"}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@arista.com", "DATE_PUBLIC": "2022-02-02T17:00:00.000Z", "ID": "CVE-2021-28503", "STATE": "PUBLIC", "TITLE": "In Arista's EOS software affected releases, eAPI might skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI."}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Arista EOS", "version": {"version_data": [{"version_affected": "<", "version_name": "EOS-4.23", "version_value": "EOS-4.23.10"}, {"version_affected": "<", "version_name": "EOS-4.24", "version_value": "EOS-4.24.8"}, {"version_affected": "<", "version_name": "EOS-4.25", "version_value": "EOS-4.25.6"}, {"version_affected": "<", "version_name": "EOS-4.26", "version_value": "EOS-4.26.3"}]}}]}, "vendor_name": "Arista Networks"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-305 Authentication Bypass by Primary Weakness"}]}]}, "references": {"reference_data": [{"name": "https://www.arista.com/en/support/advisories-notices/security-advisories/13605-security-advisory-0072", "refsource": "MISC", "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/13605-security-advisory-0072"}]}, "solution": [{"lang": "en", "value": "The recommended resolution is to upgrade to a remediated software version at your earliest convenience.\n\nThe vulnerability is fixed in the following EOS versions:\n 4.26.3 and later releases in the 4.26.x train\n 4.25.6 and later releases in the 4.25.x train\n 4.24.8 and later releases in the 4.24.x train\n 4.23.10 and later releases in the 4.24.x train"}], "source": {"advisory": "Security Advisory 0072", "defect": ["BUG606686"], "discovery": "INTERNAL"}, "work_around": [{"lang": "en", "value": "Disallowing user certificate authentication via eAPI can be used to mitigate the vulnerability.\n\nswitch(config)#management security\nswitch(config-mgmt-security)#ssl profile profileEAPI\nswitch(config-mgmt-sec-ssl-profile-profileEAPI)#no trust certificate user.cert\nswitch(config-mgmt-sec-ssl-profile-profileEAPI)#exit"}]}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T21:47:32.819Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/13605-security-advisory-0072"}]}]}, "cveMetadata": {"assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "assignerShortName": "Arista", "cveId": "CVE-2021-28503", "datePublished": "2022-02-04T22:29:27.998Z", "dateReserved": "2021-03-16T00:00:00.000Z", "dateUpdated": "2024-09-16T23:06:02.607Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "Arista EOS", "vendor": "Arista Networks", "versions": [{"lessThan": "EOS-4.23.10", "status": "affected", "version": "EOS-4.23", "versionType": "custom"}, {"lessThan": "EOS-4.24.8", "status": "affected", "version": "EOS-4.24", "versionType": "custom"}, {"lessThan": "EOS-4.25.6", "status": "affected", "version": "EOS-4.25", "versionType": "custom"}, {"lessThan": "EOS-4.26.3", "status": "affected", "version": "EOS-4.26", "versionType": "custom"}]}], "source": "psirt@arista.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "matchCriteriaId": "C48331B8-808D-4080-BD74-2DC93014D10C", "versionEndIncluding": "4.22.9m", "versionStartIncluding": "4.22", "vulnerable": true}, {"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "matchCriteriaId": "A3310AD8-03C5-4018-A49B-C3527B9C2ADB", "versionEndIncluding": "4.23.9", "versionStartIncluding": "4.23", "vulnerable": true}, {"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "matchCriteriaId": "AFB2FFFE-6E99-4222-B3F4-854B5A4B8B0A", "versionEndIncluding": "4.24.7", "versionStartIncluding": "4.24", "vulnerable": true}, {"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "matchCriteriaId": "E004CBA8-2859-4098-948B-2F5D0DD5EBA5", "versionEndIncluding": "4.25.5", "versionStartIncluding": "4.25", "vulnerable": true}, {"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "matchCriteriaId": "06AA619C-3D2F-41FC-A3F1-0080F57A8F09", "versionEndIncluding": "4.26.2", "versionStartIncluding": "4.26", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI."}, {"lang": "es", "value": "El impacto de esta vulnerabilidad es que EOS eAPI de Arista puede omitir la reevaluaci\u00f3n de las credenciales del usuario cuando es usada la autenticaci\u00f3n basada en certificados, lo que permite a atacantes remotos acceder al dispositivo por medio de eAPI"}], "id": "CVE-2021-28503", "lastModified": "2026-06-17T03:46:28.667", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 5.2, "source": "psirt@arista.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-02-04T23:15:11.350", "references": [{"source": "psirt@arista.com", "tags": ["Mitigation", "Patch", "Vendor Advisory"], "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/13605-security-advisory-0072"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Patch", "Vendor Advisory"], "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/13605-security-advisory-0072"}], "sourceIdentifier": "psirt@arista.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-305"}], "source": "psirt@arista.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}