CVE-2021-28494

CVE-2021-28494 affects Arista’s MOS (Metamako Operating System) on 7130-series switches. The issue is an authentication bypass by unprivileged users accessing the Web UI, reported for MOS-0.34.0 and prior releases. Affected software versions should upgrade to MOS-0.35.0 to remediate. The Red Hat ...

CVE-2021-28494

In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, under certain conditions, authentication is bypassed by unprivileged users who are accessing the Web UI. This issue affects: Arista Metamako Operating System MOS-0.34.0 and prior releases...

CVE-2021-28493

In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, under certain conditions, a user may be able to execute commands despite not having the privileges to do so. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train...

CVE-2021-28497

Arista MOS on 7130 (Arista 7130 MOS) is affected by CVE-2021-28497. Under certain conditions, the bash shell may be accessible to unprivileged users. Affected software trains and versions include MOS-0.1x (all releases), MOS-0.26.6 and below in MOS-0.2x, and MOS-0.31.1 and below in MOS-0.3x. Reme...

CVE-2021-28499

In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, user account passwords set in clear text could leak to users without any password. This issue affects: Arista Metamako Operating System MOS-0.18 and post releases in the MOS-0.1x train All releases in...

CVE-2021-28499

CVE-2021-28499 affects Arista MOS on 7130 devices; root cause is cleartext storage of user passwords, exposing passwords to unprivileged users. Affected MOS trains include MOS-0.18, MOS-0.1x (up to 0.2x and 0.3x MOS-0.31.1 and earlier in 0.3x). Mitigation: upgrade to remediated MOS versions MOS-0...

CVE-2021-28498

Arista MOS on 7130 devices is affected by CVE-2021-28498, where user enable passwords stored in clear text allow unprivileged access. Affected MOS versions include MOS-0.13 and later in MOS-0.1x train, MOS-0.26.6 in MOS-0.2x, and MOS-0.31.1 and earlier in MOS-0.3x. The issue is fixed by upgrading...

CVE-2021-28498

In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, user enable passwords set in clear text could result in unprivileged users getting complete access to the systems. This issue affects: Arista Metamako Operating System MOS-0.13 and post releases in the...

PT-2021-17870

Name of the Vulnerable Software and Affected Versions: Arista Metamako Operating System versions prior to MOS-0.34.0 Description: The issue allows unprivileged users to bypass authentication under certain conditions when accessing the Web UI of Arista's MOS software, which is supported on the 713...

PT-2021-17871

Name of the Vulnerable Software and Affected Versions: Arista Metamako Operating System versions MOS-0.1x train through MOS-0.13 and post releases Arista Metamako Operating System versions MOS-0.26.6 and below in the MOS-0.2x train Arista Metamako Operating System versions MOS-0.31.1 and below in...

CVE-2021-28493: Improper Authentication

In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, under certain conditions, a user may be able to execute commands despite not having the privileges to do so. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train...

PT-2021-17869

Name of the Vulnerable Software and Affected Versions: Arista Metamako Operating System versions prior to MOS-0.32.0 Arista Metamako Operating System All releases in the MOS-0.1x train Description: The issue allows a user to execute commands despite not having the necessary privileges under certa...

PT-2021-17873

Name of the Vulnerable Software and Affected Versions: Arista Metamako Operating System versions MOS-0.1x and earlier Arista Metamako Operating System versions MOS-0.2x up to MOS-0.26.6 Arista Metamako Operating System versions MOS-0.3x up to MOS-0.31.1 Description: The issue affects Arista's MOS...

PT-2021-17875

Name of the Vulnerable Software and Affected Versions: Arista Metamako Operating System versions 0.18 through 0.19 Arista Metamako Operating System versions 0.2x Arista Metamako Operating System versions 0.31.1 and prior Description: The issue affects Arista's MOS software, which is supported on...

CVE-2021-28495: Improper Authentication

In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, under certain conditions, user authentication can be bypassed when API access is enabled via the JSON-RPC APIs. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train...

CVE-2021-28494: Improper Authentication

In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, under certain conditions, authentication is bypassed by unprivileged users who are accessing the Web UI. This issue affects: Arista Metamako Operating System MOS-0.34.0 and prior releases...

CVE-2021-28498: Insufficiently Protected Credentials

In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, user enable passwords set in clear text could result in unprivileged users getting complete access to the systems. This issue affects: Arista Metamako Operating System MOS-0.13 and post releases in the...

CVE-2021-28497: Undefined Security Weakness

In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, under certain conditions, the bash shell might be accessible to unprivileged users in situations where they should not have access. This issue affects: Arista Metamako Operating System All releases in...

Vulnerabilities fixed in Arista MOS on 7130 switches

Several vulnerabilities have been fixed in Arista 7130 switches that use the Metamako Operating System MOS. The vulnerabilities allow a malicious party to perform attacks execute attacks that result in the following categories of damage: Bypassing authentication Bypassing security measure Remote...