Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-28495

Опубликовано: 09 сент. 2021
Источник: nvd
CVSS3: 7.2
CVSS3: 9.8
CVSS2: 6.8
EPSS Низкий

Описание

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, user authentication can be bypassed when API access is enabled via the JSON-RPC APIs. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.13 and post releases in the MOS-0.1x train MOS-0.26.6 and below releases in the MOS-0.2x train MOS-0.31.1 and below releases in the MOS-0.3x train

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:arista:metamako_operating_system:*:*:*:*:*:*:*:*
Версия от 0.10.0 (включая) до 0.13.0 (включая)
cpe:2.3:o:arista:metamako_operating_system:*:*:*:*:*:*:*:*
Версия от 0.20.0 (включая) до 0.26.7 (включая)
cpe:2.3:o:arista:metamako_operating_system:*:*:*:*:*:*:*:*
Версия от 0.30.0 (включая) до 0.32.0 (исключая)
cpe:2.3:h:arista:7130:-:*:*:*:*:*:*:*

EPSS

Процентиль: 60%
0.0039
Низкий

7.2 High

CVSS3

9.8 Critical

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-287
CWE-287

Связанные уязвимости

github логотип

GHSA-cpvp-q5mv-cx2q

github
больше 3 лет назад

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, user authentication can be bypassed when API access is enabled via the JSON-RPC APIs. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.13 and post releases in the MOS-0.1x train MOS-0.26.6 and below releases in the MOS-0.2x train MOS-0.31.1 and below releases in the MOS-0.3x train

EPSS

Процентиль: 60%
0.0039
Низкий

7.2 High

CVSS3

9.8 Critical

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-287
CWE-287