CVE-2021-28508

🗓️ 26 May 2022 19:48:13Reported by AristaType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 51 Views

(Arista EOS state streaming telemetry agent TerminAttr vulnerability

Reporter	Title	Published	Views	Family All 7
Arista	Security Advisory 0077	25 May 202200:00	–	arista
CNNVD	Arista Networks Arista EOS 安全漏洞	26 May 202200:00	–	cnnvd
Cvelist	CVE-2021-28508 TerminAttr streams IPsec sensitive data in clear text to other authorized users in CVP	26 May 202219:48	–	cvelist
EUVD	EUVD-2021-15184	7 Oct 202500:30	–	euvd
NVD	CVE-2021-28508	26 May 202220:15	–	nvd
OSV	CVE-2021-28508	26 May 202220:15	–	osv
Prion	Design/Logic Flaw	26 May 202220:15	–	prion

NVD

Node

arista terminattrRange<1.10.11

arista terminattrRange1.11.0–1.16.8

arista terminattrRange1.17.0–1.19.0

arista eosRange4.23–4.23.11

arista eosRange4.24–4.24.10

arista eosRange4.25–4.25.8

arista eosRange4.26–4.26.6

arista eosRange4.27–4.27.2

AND

arista ccs-722xpm-48y4Match-

arista ccs-722xpm-48zy8Match-

Node

arista terminattrRange<1.10.11

arista terminattrRange1.11.0–1.16.8

arista terminattrRange1.17.0–1.19.0

arista eosRange4.23–4.23.11

arista eosRange4.24–4.24.10

arista eosRange4.25–4.25.8

arista eosRange4.26–4.26.6

arista eosRange4.27–4.27.2

AND

arista 7050cx3-32sMatch-

arista 7050cx3m-32sMatch-

arista 7050sx3-48c8Match-

arista 7050sx3-48ycMatch-

arista 7050sx3-48yc12Match-

arista 7050sx3-48yc8Match-

arista 7050sx3-96yc8Match-

arista 7050tx3-48c8Match-

arista dcs-7050cx3-32sMatch-

arista dcs-7050cx3-32s-rMatch-

arista dcs-7050cx3m-32sMatch-

arista dcs-7050sx3-48c8Match-

arista dcs-7050sx3-48yc12Match-

arista dcs-7050sx3-48yc8Match-

arista dcs-7050sx3-96yc8Match-

Node

arista terminattrRange<1.10.11

arista terminattrRange1.11.0–1.16.8

arista terminattrRange1.17.0–1.19.0

arista eosRange4.23–4.23.11

arista eosRange4.24–4.24.10

arista eosRange4.25–4.25.8

arista eosRange4.26–4.26.6

arista eosRange4.27–4.27.2

AND

arista 7280cr2ak-30Match-

arista 7280cr2k-60Match-

arista 7280cr3-32d4Match-

arista 7280cr3-32p4Match-

arista 7280cr3-96Match-

arista 7280cr3k-32d4Match-

arista 7280cr3k-32p4Match-

arista 7280cr3k-96Match-

arista 7280dr3-24Match-

arista 7280dr3k-24Match-

arista 7280pr3-24Match-

arista 7280pr3k-24Match-

arista 7280r2Match-

arista 7280r3Match-

arista 7280sr3-48yc8Match-

arista 7280sr3k-48yc8Match-

Node

arista terminattrRange<1.10.11

arista terminattrRange1.11.0–1.16.8

arista terminattrRange1.17.0–1.19.0

arista eosRange4.23–4.23.11

arista eosRange4.24–4.24.10

arista eosRange4.25–4.25.8

arista eosRange4.26–4.26.6

arista eosRange4.27–4.27.2

AND

arista 7500r2Match-

arista 7500r3Match-

arista 7500r3-24dMatch-

arista 7500r3-24pMatch-

arista 7500r3-36cqMatch-

arista 7500r3k-36cqMatch-

Node

arista terminattrRange<1.10.11

arista terminattrRange1.11.0–1.16.8

arista terminattrRange1.17.0–1.19.0

arista eosRange4.23–4.23.11

arista eosRange4.24–4.24.10

arista eosRange4.25–4.25.8

arista eosRange4.26–4.26.6

arista eosRange4.27–4.27.2

AND

arista 7800r3-36pMatch-

arista 7800r3-48cqMatch-

arista 7800r3k-48cqMatch-

Node

arista terminattrRange<1.10.11

arista terminattrRange1.11.0–1.16.8

arista terminattrRange1.17.0–1.19.0

arista eosRange4.23–4.23.11

arista eosRange4.24–4.24.10

arista eosRange4.25–4.25.8

arista eosRange4.26–4.26.6

arista eosRange4.27–4.27.2

AND

arista 7388x5Match-

[
  {
    "product": "Arista EOS",
    "vendor": "Arista Networks",
    "versions": [
      {
        "lessThanOrEqual": "4.23.11",
        "status": "affected",
        "version": "4.23",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.24.9",
        "status": "affected",
        "version": "4.24",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.25.7",
        "status": "affected",
        "version": "4.25",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.26.5",
        "status": "affected",
        "version": "4.26",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.27.3",
        "status": "affected",
        "version": "4.27",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Arista TerminAttr",
    "vendor": "Arista Networks",
    "versions": [
      {
        "lessThanOrEqual": "v1.10.10",
        "status": "affected",
        "version": "v1.10",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "v1.16.7",
        "status": "affected",
        "version": "v1.16",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "v1.18.1",
        "status": "affected",
        "version": "v1.18",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
arista	www.arista.com/en/support/advisories-notices/security-advisories/15484-security-advisory-0077

21 Nov 2024 05:59Current

6.2Medium risk

Vulners AI Score6.2

CVSS 23.6

CVSS 3.16.1 - 6.8

EPSS0.0015