CVE-2021-28505

7.5 highEPSS 0.9%

High (7.5) in arista eos. EPSS 0.9% chance of exploitation in the next 30 days.

On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL rules in that access list will ignore the specified IP protocol.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWEs: CWE-863, CWE-284
Published: 2022-04-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

arista:eos

References

https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073
https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073

Check your stack JSON