Database/Firmware, BMC & network fabric
Arista EOS (service ACLs): Service ACL bypass for OpenConfig gNOI and RESTCONF
CVE-2021-28507Firmware, BMC & network fabriccurated
Impact
Service ACL bypass for OpenConfig gNOI and RESTCONF — the compensating control for the above does not hold
Who can reach it
Network
What to do
EOS upgrade; important because it invalidates "we ACL'd the management API" as a mitigation
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.