Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-28497

Опубликовано: 09 сент. 2021
Источник: nvd
CVSS3: 4.4
CVSS3: 7.8
CVSS2: 4.6
EPSS Низкий

Описание

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, the bash shell might be accessible to unprivileged users in situations where they should not have access. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.26.6 and below releases in the MOS-0.2x train MOS-0.31.1 and below releases in the MOS-0.3x train

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:arista:metamako_operating_system:*:*:*:*:*:*:*:*
Версия до 0.26.6 (включая)
cpe:2.3:o:arista:metamako_operating_system:*:*:*:*:*:*:*:*
Версия от 0.31.0 (включая) до 0.32.0 (исключая)
cpe:2.3:h:arista:7130:-:*:*:*:*:*:*:*

EPSS

Процентиль: 14%
0.00047
Низкий

4.4 Medium

CVSS3

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-264
NVD-CWE-Other

Связанные уязвимости

github
больше 3 лет назад

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, the bash shell might be accessible to unprivileged users in situations where they should not have access. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.26.6 and below releases in the MOS-0.2x train MOS-0.31.1 and below releases in the MOS-0.3x train

EPSS

Процентиль: 14%
0.00047
Низкий

4.4 Medium

CVSS3

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-264
NVD-CWE-Other