CVE-2021-39622

In GBoard, there is a possible way to bypass Factory Reset Protection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11...

CVE-2021-28506

An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device...

Design/Logic Flaw

In of , there is a possible bypass of Factory Reset Protection due to . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-171742549References: N/A...

Authentication flaw

An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device...

Design/Logic Flaw

In GBoard, there is a possible way to bypass Factory Reset Protection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11...

CVE-2021-39678

In of , there is a possible bypass of Factory Reset Protection due to . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-171742549References: N/A...

CVE-2021-39678

CVE-2021-39678 is described in connected sources as a vulnerability in the Android kernel allowing a bypass of Factory Reset Protection that could lead to local privilege escalation with no user interaction. The NVD entry lists impact as local, with base scores indicating high severity (CVSSv3.1:...

CVE-2021-39622

CVE-2021-39622 affects Google GBoard on Android 10–12, where a missing permission check allows bypassing Factory Reset Protection, enabling local elevation of privilege without user interaction. The NVD entry lists the impact as local privilege escalation with complete confidentiality/integrity/a...

CVE-2021-39622

In GBoard, there is a possible way to bypass Factory Reset Protection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11...

CVE-2021-28506 An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device.

An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device...

CVE-2021-28506

CVE-2021-28506 affects Arista EOS via gNOI APIs (OpenConfig gNMI/gNOI and TerminAttr) where authentication/authorization can be skipped, potentially allowing a device factory reset. The Arista advisory lists affected software trains and versions, with remediation by upgrading to remediated releas...

CVE-2021-39622: Missing Authorization

In GBoard, there is a possible way to bypass Factory Reset Protection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11...

Arista Networks Arista EOS安全漏洞

Arista Networks Arista EOS is a scalable operating system for data centers and cloud network centers from Arista Networks, Inc. Arista EOS builds cloud architectures that scale to hundreds of thousands of compute and storage nodes with management and provisioning capabilities for large-scale jobs...

PT-2022-10963

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible bypass of Factory Reset Protection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitatio...

CVE-2021-28506: Improper Authorization

An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device...

CVE-2021-39678: Undefined Security Weakness

In of , there is a possible bypass of Factory Reset Protection due to . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-171742549References: N/A...

CVE-2021-28506

An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device...

PT-2022-9898

Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description An issue has been discovered where certain gNOI APIs in Arista EOS incorrectly skip authorization and authentication, potentially allowing a factory reset of the device. Recommendations At...

PT-2022-10930

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-12 Description The issue is related to a missing permission check in GBoard, allowing for a possible bypass of Factory Reset Protection. This could lead to local escalation of privilege with no...

ASB-A-192663648

In GBoard, there is a possible way to bypass Factory Reset Protection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...