Skip to content
OpenAdvisories
Critical · 9.1 CVE-2021-28506 EUVD-2021-15182GHSA-6vpx-f5jx-6w5m

An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device.

Published Jan 14, 2022 · Updated Sep 16, 2024 · Assigned by Arista

Vendor: Arista Networks Product: EOS Category: Network devices

Description

An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device.

Affected products

VendorProductAffectedFixed
Arista Networks EOS 4.26.2F – ≤ 4.26.0, 4.25.5.1M – ≤ 4.25.5, 4.25.4M – ≤ 4.25.4, 4.25.3 – ≤ 4.25.0, 4.24.7M – ≤ 4.24.2F —

References