CVE-2021-28506 An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device.

[
  {
    "product": "EOS",
    "vendor": "Arista Networks",
    "versions": [
      {
        "lessThanOrEqual": "4.26.0",
        "status": "affected",
        "version": "4.26.2F",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.25.5",
        "status": "affected",
        "version": "4.25.5.1M",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.25.4",
        "status": "affected",
        "version": "4.25.4M",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.25.0",
        "status": "affected",
        "version": "4.25.3",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.24.2F",
        "status": "affected",
        "version": "4.24.7M",
        "versionType": "custom"
      }
    ]
  }
]