CVE-2021-28504 - Vulnerability Details

Vendors	Products
Arista	Ccs-710p-12 Ccs-710p-16p Ccs-720xp-24y6 Ccs-720xp-24zy4 Ccs-720xp-48y6 Ccs-720xp-48zc2 Ccs-720xp-96zc2 Ccs-722xpm-48y4 Ccs-722xpm-48zy8 Dcs-7010tx-48 Dcs-7050cx3-32s Dcs-7050cx3m-32s Dcs-7050sx3-48c8 Dcs-7050sx3-48yc12 Dcs-7050sx3-48yc8 Dcs-7050sx3-96yc8 Dcs-7050tx3-48c8 Eos

Link	Providers
https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "EOS", "vendor": "Arista Networks", "versions": [{"lessThanOrEqual": "4.26.0", "status": "affected", "version": "4.26.3F", "versionType": "custom"}, {"lessThanOrEqual": "4.27.0", "status": "affected", "version": "4.27.0F", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "On Arista Strata family products which have \u201cTCAM profile\u201d feature enabled when Port IPv4 access-list has a rule which matches on \u201cvxlan\u201d as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol field as expected."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-284", "description": "CWE-284 Improper Access Control", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-04-01T22:17:50", "orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073"}], "solutions": [{"lang": "en", "value": "The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Artista recommends customers move to the latest version of each release that contains all the fixes listed below.\n\nCVE-2021-28504 has been fixed in the following releases:\n\n4.26.4F and later releases in the 4.26.x train\n4.27.1M and later releases in the 4.27.x train"}], "source": {"advisory": "73", "defect": ["BUG608752"], "discovery": "INTERNAL"}, "title": "On Arista Strata family products which have \u201cTCAM profile\u201d feature enabled when Port IPv4 access-list has a rule which matches on \u201cvxlan\u201d as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol fi ...", "workarounds": [{"lang": "en", "value": "Replace \"vxlan\" IP protocol match with match on IP protocol \"udp\" and Layer 4 destination port for VxLAN encapsulated packets i.e 4789. \nIf VXLAN L4 destination port number is not the default 4789 then use the configured L4 destination port number."}], "x_ConverterErrors": {"TITLE": {"error": "TITLE too long. Truncating in v5 record.", "message": "Truncated!"}}, "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@arista.com", "ID": "CVE-2021-28504", "STATE": "PUBLIC", "TITLE": "On Arista Strata family products which have \u201cTCAM profile\u201d feature enabled when Port IPv4 access-list has a rule which matches on \u201cvxlan\u201d as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol field as expected."}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "EOS", "version": {"version_data": [{"version_affected": "<=", "version_name": "4.26.3F", "version_value": "4.26.0"}, {"version_affected": "<=", "version_name": "4.27.0F", "version_value": "4.27.0"}]}}]}, "vendor_name": "Arista Networks"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "On Arista Strata family products which have \u201cTCAM profile\u201d feature enabled when Port IPv4 access-list has a rule which matches on \u201cvxlan\u201d as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol field as expected."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-284 Improper Access Control"}]}]}, "references": {"reference_data": [{"name": "https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073", "refsource": "MISC", "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073"}]}, "solution": [{"lang": "en", "value": "The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Artista recommends customers move to the latest version of each release that contains all the fixes listed below.\n\nCVE-2021-28504 has been fixed in the following releases:\n\n4.26.4F and later releases in the 4.26.x train\n4.27.1M and later releases in the 4.27.x train"}], "source": {"advisory": "73", "defect": ["BUG608752"], "discovery": "INTERNAL"}, "work_around": [{"lang": "en", "value": "Replace \"vxlan\" IP protocol match with match on IP protocol \"udp\" and Layer 4 destination port for VxLAN encapsulated packets i.e 4789. \nIf VXLAN L4 destination port number is not the default 4789 then use the configured L4 destination port number."}]}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T21:47:32.630Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073"}]}]}, "cveMetadata": {"assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "assignerShortName": "Arista", "cveId": "CVE-2021-28504", "datePublished": "2022-04-01T22:17:50", "dateReserved": "2021-03-16T00:00:00", "dateUpdated": "2024-08-03T21:47:32.630Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : EOS (string)

vendor : Arista Networks (string)

versions : [ »

0 : { »

lessThanOrEqual : 4.26.0 (string)

status : affected (string)

version : 4.26.3F (string)

versionType : custom (string)

}

1 : { »

lessThanOrEqual : 4.27.0 (string)

status : affected (string)

version : 4.27.0F (string)

versionType : custom (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol field as expected. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N (string)

version : 3.1 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-284 (string)

description : CWE-284 Improper Access Control (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2022-04-01T22:17:50 (string)

orgId : c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7 (string)

shortName : Arista (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073 (string)

}

]

solutions : [ »

0 : { »

lang : en (string)

value : The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Artista recommends customers move to the latest version of each release that contains all the fixes listed below. CVE-2021-28504 has been fixed in the following releases: 4.26.4F and later releases in the 4.26.x train 4.27.1M and later releases in the 4.27.x train (string)

}

]

source : { »

advisory : 73 (string)

defect : [ »

0 : BUG608752 (string)

]

discovery : INTERNAL (string)

}

title : On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol fi ... (string)

workarounds : [ »

0 : { »

lang : en (string)

value : Replace "vxlan" IP protocol match with match on IP protocol "udp" and Layer 4 destination port for VxLAN encapsulated packets i.e 4789. If VXLAN L4 destination port number is not the default 4789 then use the configured L4 destination port number. (string)

}

]

x_ConverterErrors : { »

TITLE : { »

error : TITLE too long. Truncating in v5 record. (string)

message : Truncated! (string)

}

x_generator : { »

engine : Vulnogram 0.0.9 (string)

}

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@arista.com (string)

ID : CVE-2021-28504 (string)

STATE : PUBLIC (string)

TITLE : On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol field as expected. (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : EOS (string)

version : { »

version_data : [ »

0 : { »

version_affected : <= (string)

version_name : 4.26.3F (string)

version_value : 4.26.0 (string)

}

1 : { »

version_affected : <= (string)

version_name : 4.27.0F (string)

version_value : 4.27.0 (string)

}

]

}

]

}

vendor_name : Arista Networks (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol field as expected. (string)

}

]

}

generator : { »

engine : Vulnogram 0.0.9 (string)

}

impact : { »

cvss : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N (string)

version : 3.1 (string)

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : CWE-284 Improper Access Control (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073 (string)

refsource : MISC (string)

url : https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073 (string)

}

]

}

solution : [ »

0 : { »

lang : en (string)

value : The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Artista recommends customers move to the latest version of each release that contains all the fixes listed below. CVE-2021-28504 has been fixed in the following releases: 4.26.4F and later releases in the 4.26.x train 4.27.1M and later releases in the 4.27.x train (string)

}

]

source : { »

advisory : 73 (string)

defect : [ »

0 : BUG608752 (string)

]

discovery : INTERNAL (string)

}

work_around : [ »

0 : { »

lang : en (string)

value : Replace "vxlan" IP protocol match with match on IP protocol "udp" and Layer 4 destination port for VxLAN encapsulated packets i.e 4789. If VXLAN L4 destination port number is not the default 4789 then use the configured L4 destination port number. (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T21:47:32.630Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7 (string)

assignerShortName : Arista (string)

cveId : CVE-2021-28504 (string)

datePublished : 2022-04-01T22:17:50 (string)

dateReserved : 2021-03-16T00:00:00 (string)

dateUpdated : 2024-08-03T21:47:32.630Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "matchCriteriaId": "2A8E9397-1B74-4A40-B8E3-7088A5A45749", "versionEndExcluding": "4.26.4m", "versionStartIncluding": "4.26", "vulnerable": true}, {"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "matchCriteriaId": "F85F865B-F425-46DD-B9D4-C96AE100F39F", "versionEndExcluding": "4.27.1f", "versionStartIncluding": "4.27", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:arista:ccs-710p-12:-:*:*:*:*:*:*:*", "matchCriteriaId": "3671762A-7E5C-47BF-AE10-64F19C82EEDF", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:ccs-710p-16p:-:*:*:*:*:*:*:*", "matchCriteriaId": "AC8C4306-2090-4170-B316-79613AA19392", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:ccs-720xp-24y6:-:*:*:*:*:*:*:*", "matchCriteriaId": "45460268-9775-4047-B36D-1A62480047C7", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:ccs-720xp-24zy4:-:*:*:*:*:*:*:*", "matchCriteriaId": "7A3886D9-AB47-4E4B-95E6-39E31100FE62", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:ccs-720xp-48y6:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D21D207-AD0F-4745-B123-A7219DD6512F", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:ccs-720xp-48zc2:-:*:*:*:*:*:*:*", "matchCriteriaId": "B317039B-7365-4348-8286-39128C4B363F", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:ccs-720xp-96zc2:-:*:*:*:*:*:*:*", "matchCriteriaId": "2E58B31B-C6C1-4EDC-8D4F-1528C9B1CB8A", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:ccs-722xpm-48y4:-:*:*:*:*:*:*:*", "matchCriteriaId": "074CBF00-1D2C-4388-874A-62453B1D4564", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:ccs-722xpm-48zy8:-:*:*:*:*:*:*:*", "matchCriteriaId": "D15C1D00-5F35-4F67-8075-D84D3BD9CE73", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:dcs-7010tx-48:-:*:*:*:*:*:*:*", "matchCriteriaId": "9CB43CD4-C96F-483C-B743-3D81C9A65EDF", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:dcs-7050cx3-32s:-:*:*:*:*:*:*:*", "matchCriteriaId": "E7C133EA-753A-4770-AEF8-11AC8E901F1A", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:dcs-7050cx3m-32s:-:*:*:*:*:*:*:*", "matchCriteriaId": "5D11D6B9-1E68-4A65-A9CD-8DD299EC6B25", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:dcs-7050sx3-48c8:-:*:*:*:*:*:*:*", "matchCriteriaId": "11B7A876-587F-4C51-BE49-C82F6508C536", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:dcs-7050sx3-48yc12:-:*:*:*:*:*:*:*", "matchCriteriaId": "EEB629B5-7E62-4972-A288-EF76FFA3E441", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:dcs-7050sx3-48yc8:-:*:*:*:*:*:*:*", "matchCriteriaId": "33079D44-2255-4682-A4BC-4B071D8EDCFA", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:dcs-7050sx3-96yc8:-:*:*:*:*:*:*:*", "matchCriteriaId": "69F1C5CA-19D7-4F40-93EB-97F44DCD5DCB", "vulnerable": false}, {"criteria": "cpe:2.3:h:arista:dcs-7050tx3-48c8:-:*:*:*:*:*:*:*", "matchCriteriaId": "418E2ED9-B9FC-438D-9F7C-8D6DB7E297AA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "On Arista Strata family products which have \u201cTCAM profile\u201d feature enabled when Port IPv4 access-list has a rule which matches on \u201cvxlan\u201d as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol field as expected."}, {"lang": "es", "value": "En los productos de la familia Arista Strata que tienen habilitada la funcionalidad \"perfil TCAM\", cuando la lista de acceso IPv4 del puerto presenta una regla que coincide con \"vxlan\" como protocolo, esa regla y las reglas posteriores (reglas declaradas despu\u00e9s de ella en la ACL) no coinciden con el campo de protocolo IP como era esperado"}], "id": "CVE-2021-28504", "lastModified": "2024-11-21T05:59:47.823", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "psirt@arista.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-04-01T23:15:09.380", "references": [{"source": "psirt@arista.com", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073"}], "sourceIdentifier": "psirt@arista.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}], "source": "psirt@arista.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-863"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 2A8E9397-1B74-4A40-B8E3-7088A5A45749 (string)

versionEndExcluding : 4.26.4m (string)

versionStartIncluding : 4.26 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:* (string)

matchCriteriaId : F85F865B-F425-46DD-B9D4-C96AE100F39F (string)

versionEndExcluding : 4.27.1f (string)

versionStartIncluding : 4.27 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:arista:ccs-710p-12:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3671762A-7E5C-47BF-AE10-64F19C82EEDF (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:arista:ccs-710p-16p:-:*:*:*:*:*:*:* (string)

matchCriteriaId : AC8C4306-2090-4170-B316-79613AA19392 (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:arista:ccs-720xp-24y6:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 45460268-9775-4047-B36D-1A62480047C7 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:arista:ccs-720xp-24zy4:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7A3886D9-AB47-4E4B-95E6-39E31100FE62 (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:arista:ccs-720xp-48y6:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 4D21D207-AD0F-4745-B123-A7219DD6512F (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:arista:ccs-720xp-48zc2:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B317039B-7365-4348-8286-39128C4B363F (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:arista:ccs-720xp-96zc2:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2E58B31B-C6C1-4EDC-8D4F-1528C9B1CB8A (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:arista:ccs-722xpm-48y4:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 074CBF00-1D2C-4388-874A-62453B1D4564 (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:arista:ccs-722xpm-48zy8:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D15C1D00-5F35-4F67-8075-D84D3BD9CE73 (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:arista:dcs-7010tx-48:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 9CB43CD4-C96F-483C-B743-3D81C9A65EDF (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:arista:dcs-7050cx3-32s:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E7C133EA-753A-4770-AEF8-11AC8E901F1A (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:arista:dcs-7050cx3m-32s:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5D11D6B9-1E68-4A65-A9CD-8DD299EC6B25 (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:arista:dcs-7050sx3-48c8:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 11B7A876-587F-4C51-BE49-C82F6508C536 (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:h:arista:dcs-7050sx3-48yc12:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EEB629B5-7E62-4972-A288-EF76FFA3E441 (string)

vulnerable : false (boolean)

}

14 : { »

criteria : cpe:2.3:h:arista:dcs-7050sx3-48yc8:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 33079D44-2255-4682-A4BC-4B071D8EDCFA (string)

vulnerable : false (boolean)

}

15 : { »

criteria : cpe:2.3:h:arista:dcs-7050sx3-96yc8:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 69F1C5CA-19D7-4F40-93EB-97F44DCD5DCB (string)

vulnerable : false (boolean)

}

16 : { »

criteria : cpe:2.3:h:arista:dcs-7050tx3-48c8:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 418E2ED9-B9FC-438D-9F7C-8D6DB7E297AA (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol field as expected. (string)

}

1 : { »

lang : es (string)

value : En los productos de la familia Arista Strata que tienen habilitada la funcionalidad "perfil TCAM", cuando la lista de acceso IPv4 del puerto presenta una regla que coincide con "vxlan" como protocolo, esa regla y las reglas posteriores (reglas declaradas después de ella en la ACL) no coinciden con el campo de protocolo IP como era esperado (string)

}

]

id : CVE-2021-28504 (string)

lastModified : 2024-11-21T05:59:47.823 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : MEDIUM (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 4.3 (number)

confidentialityImpact : NONE (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:M/Au:N/C:N/I:P/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 8.6 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : psirt@arista.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2022-04-01T23:15:09.380 (string)

references : [ »

0 : { »

source : psirt@arista.com (string)

tags : [ »

0 : Mitigation (string)

1 : Vendor Advisory (string)

]

url : https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mitigation (string)

1 : Vendor Advisory (string)

]

url : https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073 (string)

}

]

sourceIdentifier : psirt@arista.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-284 (string)

}

]

source : psirt@arista.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-863 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object