CVE-2021-28505 On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL rules in that access list will ignore the specified IP protocol.

[
  {
    "product": "EOS",
    "vendor": "Arista Networks",
    "versions": [
      {
        "lessThanOrEqual": "4.26.0",
        "status": "affected",
        "version": "4.26.3M",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.27.0",
        "status": "affected",
        "version": "4.27.0F",
        "versionType": "custom"
      }
    ]
  }
]