Description
For certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invalid Type-Length-Value (TLV) causes the PTP agent to restart. Repeated restarts of the service will make the service unavailable.
Published: 2023-01-24
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Solution

The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Artista recommends customers move to the latest version of each release that contains all the fixes listed below. CVE-2021-28510 has been fixed in the following releases: 4.27.2 and later releases in the 4.27.x train 4.26.5 and later releases in the 4.26.x train 4.25.7 and later releases in the 4.25.x train 4.24.9 and later releases in the 4.24.x train 4.23.11 and later releases in the 4.23.x train


Vendor Workaround

Install ACL rules to drop PTP packets from untrusted sources. Best practice is to block access to untrusted (non-management) networks.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2021-15186 For certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invalid Type-Length-Value (TLV) causes the PTP agent to restart. Repeated restarts of the service will make the service unavailable.
History

Tue, 01 Apr 2025 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Subscriptions

Arista 7020r 7050cx3-32s 7050cx3m-32s 7050qx-32s 7050qx2-32s 7050sx-128 7050sx-64 7050sx-72q 7050sx2-128 7050sx2-72q 7050sx3-48c8 7050sx3-48yc 7050sx3-48yc12 7050sx3-48yc8 7050sx3-96yc8 7050tx-48 7050tx-64 7050tx-72q 7050tx2-128 7050tx3-48c8 7060cx-32s 7060cx2-32s 7060dx4-32 7060px4-32 7060sx2-48yc6 7150s-24 7150s-52 7150s-64 7150sc-24 7150sc-64 7170-32c 7170-32cd 7170-64c 720xp-24y6 720xp-24zy4 720xp-48y6 720xp-48zc2 720xp-96zc2 7250qx-64 7260cx 7260cx3 7260cx3-64 7260qx 7280e 7280r 7280r2 7280r3 7280sr3-48yc8 7280sr3k-48yc8 7300x-32q 7300x-64s 7300x-64t 7300x3-32c 7300x3-48yc4 7304x3 7308x3 7320x-32c 7324x 7328x 7368x4 7500e 7500r 7500r2 7500r3 7500r3-24d 7500r3-24p 7500r3-36cq 7500r3k-36cq 7504r3 7508r3 7512r3 7800r3-36p 7800r3-48cq 7800r3k-48cq 7804r3 7808r3 Eos
cve-icon MITRE

Status: PUBLISHED

Assigner: Arista

Published:

Updated: 2025-04-01T18:44:26.214Z

Reserved: 2021-03-16T00:00:00.000Z

Link: CVE-2021-28510

cve-icon Vulnrichment

Updated: 2024-08-03T21:47:32.671Z

cve-icon NVD

Status : Modified

Published: 2023-01-26T21:15:22.147

Modified: 2024-11-21T05:59:48.603

Link: CVE-2021-28510

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses