CVE-2021-28501

The CVE-2021-28501 issue in Arista EOS concerns the incorrect use of EOS AAA APIs by the OpenConfig and TerminAttr agents, which could allow unrestricted access for local users configured with nopassword. Connected advisories confirm this affects OpenConfig gNMI/gNOI and TerminAttr and provide co...

Security Advisory 0071

Security Advisory 0071 . CSAF PDF Date: January 11th, 2022 Revision | Date | Changes ---|---|--- 1.0 | January 11th, 2022 | Initial release Security Advisory 0071 The CVE-ID tracking this issue: CVE-2021-28500 CVSSv3.1 Base Score: 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H The CVE-ID tracki...