Skip to content
OpenAdvisories
Medium · 5.5 CVE-2021-28507 EUVD-2021-15183GHSA-4j73-jx76-fgw8

An issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for OpenConfig gNOI and OpenConfig RESTCONF might be bypassed, which results in the denied requests being forwarded to the agent.

Published Jan 14, 2022 · Updated Sep 17, 2024 · Assigned by Arista

Vendor: Arista Networks Product: EOS Category: Network devices

Description

An issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for OpenConfig gNOI and OpenConfig RESTCONF might be bypassed, which results in the denied requests being forwarded to the agent.

Affected products

VendorProductAffectedFixed
Arista Networks EOS 4.22.x, 4.26.2F – ≤ 4.26.0, 4.25.5.1M – ≤ 4.25.5, 4.25.4M – ≤ 4.25.4, 4.25.3 – ≤ 4.25.0, 4.24.7M – ≤ 4.24.0, 4.23.9M – ≤ 4.23.0, 4.21.x – ≤ 4.21.x —

References