CVE-2021-28494

Опубликовано: 09 сент. 2021

Источник: nvd

CVSS3: 9.6

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, authentication is bypassed by unprivileged users who are accessing the Web UI. This issue affects: Arista Metamako Operating System MOS-0.34.0 and prior releases

Ссылки

https://www.arista.com/en/support/advisories-notices/security-advisories/12916-security-advisory-68
Mitigation
Vendor Advisory
https://www.arista.com/en/support/advisories-notices/security-advisories/12916-security-advisory-68
Mitigation
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:arista:metamako_operating_system:*:*:*:*:*:*:*:*

Версия до 0.34.0 (включая)

cpe:2.3:h:arista:7130:-:*:*:*:*:*:*:*

EPSS

Процентиль: 52%

0.00293

Низкий

9.6 Critical

CVSS3

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-p97q-qr3w-x236

github

больше 3 лет назад

EPSS

Процентиль: 52%

0.00293

Низкий

9.6 Critical

CVSS3

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-287