CVE-2021-28495

In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, under certain conditions, user authentication can be bypassed when API access is enabled via the JSON-RPC APIs. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train...

Authentication flaw

In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, under certain conditions, user authentication can be bypassed when API access is enabled via the JSON-RPC APIs. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train...

CVE-2021-28494

In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, under certain conditions, authentication is bypassed by unprivileged users who are accessing the Web UI. This issue affects: Arista Metamako Operating System MOS-0.34.0 and prior releases...

CVE-2021-28494

CVE-2021-28494 affects Arista’s MOS (Metamako Operating System) on 7130-series switches. The issue is an authentication bypass by unprivileged users accessing the Web UI, reported for MOS-0.34.0 and prior releases. Affected software versions should upgrade to MOS-0.35.0 to remediate. The Red Hat ...

CVE-2021-28493

CVE-2021-28493 affects Arista Metamako Operating System (MOS) running on the 7130 product line. The issue is an authorization flaw that can allow a user to execute commands despite lacking privileges, affecting MOS releases in the MOS-0.1x train up to MOS-0.32.0 and prior. The security advisory (...

CVE-2021-28495

In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, under certain conditions, user authentication can be bypassed when API access is enabled via the JSON-RPC APIs. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train...

CVE-2021-28495

CVE-2021-28495 affects Arista MOS (Metamako Operating System) on the 7130 line. The vulnerability allows bypass of user authentication when API access is enabled via JSON-RPC APIs under certain conditions, with MOS trains MOS-0.1x (0.13 and later in that train) and MOS-0.2x MOS-0.31.1 and earlier...

CVE-2021-28497

Arista MOS on 7130 (Arista 7130 MOS) is affected by CVE-2021-28497. Under certain conditions, the bash shell may be accessible to unprivileged users. Affected software trains and versions include MOS-0.1x (all releases), MOS-0.26.6 and below in MOS-0.2x, and MOS-0.31.1 and below in MOS-0.3x. Reme...

CVE-2021-28497

In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, under certain conditions, the bash shell might be accessible to unprivileged users in situations where they should not have access. This issue affects: Arista Metamako Operating System All releases in...

CVE-2021-28498

In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, user enable passwords set in clear text could result in unprivileged users getting complete access to the systems. This issue affects: Arista Metamako Operating System MOS-0.13 and post releases in the...

CVE-2021-28498

Arista MOS on 7130 devices is affected by CVE-2021-28498, where user enable passwords stored in clear text allow unprivileged access. Affected MOS versions include MOS-0.13 and later in MOS-0.1x train, MOS-0.26.6 in MOS-0.2x, and MOS-0.31.1 and earlier in MOS-0.3x. The issue is fixed by upgrading...

Arista Networks MOS 授权问题漏洞

Arista Networks MOS is a fully programmable and highly modular Linux-based network operating system from Arista Networks, Inc. that uses the familiar industry standard CLI and runs a single binary software image in the Arista switch family. The vulnerability can be exploited to allow an...

Arista Networks MOS 安全漏洞

Arista Networks MOS is a fully programmable and highly modular Linux-based network operating system from Arista Networks, Inc. that uses the familiar industry-standard CLI and runs a single binary software image in the Arista switch family. Arista Networks MOS is vulnerable to an access control...

Security Advisory 0064

Security Advisory 0064 . CSAF PDF Date: August 20th, 2021 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | August 20th, 2021 | Initial Release The CVE-ID tracking this issue: CVE-2021-28498 CVSSv3.1 Base Score: 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H The CVE-ID tracking this issu...

Security Advisory 0067

Security Advisory 0067 . CSAF PDF Date: August 20th, 2021 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | August 20th, 2021 | Initial Release The CVE-ID tracking this issue: CVE-2021-28493 CVSSv3.1 Base Score: 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H Description This advisory...

Security Advisory 0068

Security Advisory 0068 . CSAF PDF Date: August 20th, 2021 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | August 20th, 2021 | Initial Release The CVE-ID tracking this issue: CVE-2021-28494 CVSSv3.1 Base Score: 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H Description This advisory...

Security Advisory 0065

Security Advisory 0065 . CSAF PDF Date: August 20th, 2021 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | August 20th, 2021 | Initial Release The CVE-ID tracking this issue: CVE-2021-28497 CVSSv3.1 Base Score: 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Description This advisory...

Security Advisory 0066

Security Advisory 0066 . CSAF PDF Date: August 20th, 2021 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | August 20th, 2021 | Initial Release The CVE-ID tracking this issue: CVE-2021-28495 CVSSv3.1 Base Score: 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L Description This advisory...

Security Advisory 0062

Security Advisory 0062 PDF Updated: March 29th, 2021 Revision | Date | Changes ---|---|--- 1.0 | March 16th, 2021 | Initial Release 1.1 | March 29th, 2021 | -Telegraf removed from affected EOS features - Influxdb removed from affected components in MOS - Added config for SSL profile with trust...

mos-evolvent.ru Cross Site Scripting vulnerability OBB-1279885

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...