by Kastro
Paper/Archive/CVE-2021-28494

CVE-2021-28494

Arista Metamako Operating System — In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, authenticatio…

EPSS 0.9%CVSS 9.6
critical.is priorityof 100
41
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 59.0.590 × 2011.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, authentication is bypassed by unprivileged users who are accessing the Web UI. This issue affects: Arista Metamako Operating System MOS-0.34.0 and prior releases

Affected

ProductAffectedFixed inSource
Metamako Operating SystemMOS-0.35.0 – < MOS-0.35.0MOS-0.35.0CNA

Scores by source

Arista (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

References

refarista.com/en/support/advisories-notices/security-advisories/12916-security-advisory-68