CVE-2021-28507

7.1 highEPSS 0.7%

High (7.1) in arista eos. EPSS 0.7% chance of exploitation in the next 30 days.

An issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for OpenConfig gNOI and OpenConfig RESTCONF might be bypassed, which results in the denied requests being forwarded to the agent.

Severity

CVSS 3.1

7.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2022-01-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

arista:eos

References

https://www.arista.com/en/support/advisories-notices/security-advisories/13449-security-advisory-0071
https://www.arista.com/en/support/advisories-notices/security-advisories/13449-security-advisory-0071

Check your stack JSON