Lucene search

AristaCVE-2021-28510

HistoryJan 26, 2023 - 9:15 p.m.

CVE-2021-28510

2023-01-2621:15:22

CWE-1284

CWE-400

Arista

web.nvd.nist.gov

cve

2021

28510

eos

precision time protocol

ptp

management message

signaling message

tlv

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

37.4%

JSON

For certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invalid Type-Length-Value (TLV) causes the PTP agent to restart. Repeated restarts of the service will make the service unavailable.

Affected configurations

Nvd

Node

aristaeosRange<4.23.10

aristaeosRange4.24.0–4.24.8

aristaeosRange4.25.0–4.25.6

aristaeosRange4.26.0–4.26.4

aristaeosRange4.27.0–4.27.1

AND

arista7020rMatch-

arista7050cx3-32sMatch-

arista7050cx3m-32sMatch-

arista7050qx-32sMatch-

arista7050qx2-32sMatch-

arista7050sx-128Match-

arista7050sx-64Match-

arista7050sx-72qMatch-

arista7050sx2-128Match-

arista7050sx2-72qMatch-

arista7050sx3-48c8Match-

arista7050sx3-48ycMatch-

arista7050sx3-48yc12Match-

arista7050sx3-48yc8Match-

arista7050sx3-96yc8Match-

arista7050tx-48Match-

arista7050tx-64Match-

arista7050tx-72qMatch-

arista7050tx2-128Match-

arista7050tx3-48c8Match-

arista7060cx-32sMatch-

arista7060cx2-32sMatch-

arista7060dx4-32Match-

arista7060px4-32Match-

arista7060sx2-48yc6Match-

arista7150s-24Match-

arista7150s-52Match-

arista7150s-64Match-

arista7150sc-24Match-

arista7150sc-64Match-

arista7170-32cMatch-

arista7170-32cdMatch-

arista7170-64cMatch-

arista720xp-24y6Match-

arista720xp-24zy4Match-

arista720xp-48y6Match-

arista720xp-48zc2Match-

arista720xp-96zc2Match-

arista7250qx-64Match-

arista7260cxMatch-

arista7260cx3Match-

arista7260cx3-64Match-

arista7260qxMatch-

arista7280eMatch-

arista7280rMatch-

arista7280r2Match-

arista7280r3Match-

arista7280sr3-48yc8Match-

arista7280sr3k-48yc8Match-

arista7300x-32qMatch-

arista7300x-64sMatch-

arista7300x-64tMatch-

arista7300x3-32cMatch-

arista7300x3-48yc4Match-

arista7304x3Match-

arista7308x3Match-

arista7320x-32cMatch-

arista7324xMatch-

arista7328xMatch-

arista7368x4Match-

arista7500eMatch-

arista7500rMatch-

arista7500r2Match-

arista7500r3Match-

arista7500r3-24dMatch-

arista7500r3-24pMatch-

arista7500r3-36cqMatch-

arista7500r3k-36cqMatch-

arista7504r3Match-

arista7508r3Match-

arista7512r3Match-

arista7800r3-36pMatch-

arista7800r3-48cqMatch-

arista7800r3k-48cqMatch-

arista7804r3Match-

arista7808r3Match-

VendorProductVersionCPE
aristaeos*cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*
arista7020r-cpe:2.3:h:arista:7020r:-:*:*:*:*:*:*:*
arista7050cx3-32s-cpe:2.3:h:arista:7050cx3-32s:-:*:*:*:*:*:*:*
arista7050cx3m-32s-cpe:2.3:h:arista:7050cx3m-32s:-:*:*:*:*:*:*:*
arista7050qx-32s-cpe:2.3:h:arista:7050qx-32s:-:*:*:*:*:*:*:*
arista7050qx2-32s-cpe:2.3:h:arista:7050qx2-32s:-:*:*:*:*:*:*:*
arista7050sx-128-cpe:2.3:h:arista:7050sx-128:-:*:*:*:*:*:*:*
arista7050sx-64-cpe:2.3:h:arista:7050sx-64:-:*:*:*:*:*:*:*
arista7050sx-72q-cpe:2.3:h:arista:7050sx-72q:-:*:*:*:*:*:*:*
arista7050sx2-128-cpe:2.3:h:arista:7050sx2-128:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
arista	eos	*	cpe:2.3:o:arista:eos::::::::
arista	7020r	-	cpe:2.3:h:arista:7020r:-:::::::*
arista	7050cx3-32s	-	cpe:2.3:h:arista:7050cx3-32s:-:::::::*
arista	7050cx3m-32s	-	cpe:2.3:h:arista:7050cx3m-32s:-:::::::*
arista	7050qx-32s	-	cpe:2.3:h:arista:7050qx-32s:-:::::::*
arista	7050qx2-32s	-	cpe:2.3:h:arista:7050qx2-32s:-:::::::*
arista	7050sx-128	-	cpe:2.3:h:arista:7050sx-128:-:::::::*
arista	7050sx-64	-	cpe:2.3:h:arista:7050sx-64:-:::::::*
arista	7050sx-72q	-	cpe:2.3:h:arista:7050sx-72q:-:::::::*
arista	7050sx2-128	-	cpe:2.3:h:arista:7050sx2-128:-:::::::*

Rows per page:

1-10 of 771

CNA Affected

[
  {
    "vendor": "Arista Networks",
    "product": "EOS",
    "versions": [
      {
        "version": "4.22",
        "status": "affected"
      },
      {
        "version": "4.27.1",
        "status": "affected",
        "lessThanOrEqual": "4.27.0",
        "versionType": "custom"
      },
      {
        "version": "4.26.4",
        "status": "affected",
        "lessThanOrEqual": "4.26.0",
        "versionType": "custom"
      },
      {
        "version": "4.25.6",
        "status": "affected",
        "lessThanOrEqual": "4.25.0",
        "versionType": "custom"
      },
      {
        "version": "4.24.8",
        "status": "affected",
        "lessThanOrEqual": "4.24.0",
        "versionType": "custom"
      },
      {
        "version": "4.23.10",
        "status": "affected",
        "lessThanOrEqual": "4.23.0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.arista.com/en/support/advisories-notices/security-advisory/15439-security-advisory-0076

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

37.4%

JSON

Related for CVE-2021-28510