CVE-2021-28508

Exploit

EPSS 0.15%
Published 26.05.2022 20:15:08
Last modified 21.11.2024 05:59:48
Source psirt@arista.com
Teams watchlist Login
Open Login

This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak IPsec sensitive data in clear text in CVP to other authorized users, which could cause IPsec traffic to be decrypted or modified by other authorized users on the device.

Affected products Warnungen 0 Metrics 4 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Arista ≫ Terminattr Version < 1.10.11

Arista ≫ Ccs-722xpm-48y4 Version-
Arista ≫ Ccs-722xpm-48zy8 Version-

Arista ≫ Terminattr Version >= 1.11.0 < 1.16.8

Arista ≫ Ccs-722xpm-48y4 Version-
Arista ≫ Ccs-722xpm-48zy8 Version-

Arista ≫ Terminattr Version >= 1.17.0 < 1.19.0

Arista ≫ Ccs-722xpm-48y4 Version-
Arista ≫ Ccs-722xpm-48zy8 Version-

Arista ≫ Eos Version >= 4.23 <= 4.23.11

Arista ≫ Ccs-722xpm-48y4 Version-
Arista ≫ Ccs-722xpm-48zy8 Version-

Arista ≫ Eos Version >= 4.24 < 4.24.10

Arista ≫ Ccs-722xpm-48y4 Version-
Arista ≫ Ccs-722xpm-48zy8 Version-

Arista ≫ Eos Version >= 4.25 < 4.25.8

Arista ≫ Ccs-722xpm-48y4 Version-
Arista ≫ Ccs-722xpm-48zy8 Version-

Arista ≫ Eos Version >= 4.26 < 4.26.6

Arista ≫ Ccs-722xpm-48y4 Version-
Arista ≫ Ccs-722xpm-48zy8 Version-

Arista ≫ Eos Version >= 4.27 < 4.27.2

Arista ≫ Ccs-722xpm-48y4 Version-
Arista ≫ Ccs-722xpm-48zy8 Version-

Arista ≫ Terminattr Version < 1.10.11

   Arista ≫ 7050cx3-32s Version-
   Arista ≫ 7050cx3m-32s Version-
   Arista ≫ 7050sx3-48c8 Version-
   Arista ≫ 7050sx3-48yc Version-
   Arista ≫ 7050sx3-48yc12 Version-
   Arista ≫ 7050sx3-48yc8 Version-
   Arista ≫ 7050sx3-96yc8 Version-
   Arista ≫ 7050tx3-48c8 Version-
   Arista ≫ Dcs-7050cx3-32s Version-
   Arista ≫ Dcs-7050cx3-32s-r Version-
   Arista ≫ Dcs-7050cx3m-32s Version-
   Arista ≫ Dcs-7050sx3-48c8 Version-
   Arista ≫ Dcs-7050sx3-48yc12 Version-
   Arista ≫ Dcs-7050sx3-48yc8 Version-
   Arista ≫ Dcs-7050sx3-96yc8 Version-

Arista ≫ Terminattr Version >= 1.11.0 < 1.16.8

Arista ≫ Terminattr Version >= 1.17.0 < 1.19.0

Arista ≫ Eos Version >= 4.23 <= 4.23.11

Arista ≫ Eos Version >= 4.24 < 4.24.10

Arista ≫ Eos Version >= 4.25 < 4.25.8

Arista ≫ Eos Version >= 4.26 < 4.26.6

Arista ≫ Eos Version >= 4.27 < 4.27.2

Arista ≫ Terminattr Version < 1.10.11

   Arista ≫ 7280cr2ak-30 Version-
   Arista ≫ 7280cr2k-60 Version-
   Arista ≫ 7280cr3-32d4 Version-
   Arista ≫ 7280cr3-32p4 Version-
   Arista ≫ 7280cr3-96 Version-
   Arista ≫ 7280cr3k-32d4 Version-
   Arista ≫ 7280cr3k-32p4 Version-
   Arista ≫ 7280cr3k-96 Version-
   Arista ≫ 7280dr3-24 Version-
   Arista ≫ 7280dr3k-24 Version-
   Arista ≫ 7280pr3-24 Version-
   Arista ≫ 7280pr3k-24 Version-
   Arista ≫ 7280r2 Version-
   Arista ≫ 7280r3 Version-
   Arista ≫ 7280sr3-48yc8 Version-
   Arista ≫ 7280sr3k-48yc8 Version-

Arista ≫ Terminattr Version >= 1.11.0 < 1.16.8

Arista ≫ Terminattr Version >= 1.17.0 < 1.19.0

Arista ≫ Eos Version >= 4.23 <= 4.23.11

Arista ≫ Eos Version >= 4.24 < 4.24.10

Arista ≫ Eos Version >= 4.25 < 4.25.8

Arista ≫ Eos Version >= 4.26 < 4.26.6

Arista ≫ Eos Version >= 4.27 < 4.27.2

Arista ≫ Terminattr Version < 1.10.11

   Arista ≫ 7500r2 Version-
   Arista ≫ 7500r3 Version-
   Arista ≫ 7500r3-24d Version-
   Arista ≫ 7500r3-24p Version-
   Arista ≫ 7500r3-36cq Version-
   Arista ≫ 7500r3k-36cq Version-

Arista ≫ Terminattr Version >= 1.11.0 < 1.16.8

   Arista ≫ 7500r2 Version-
   Arista ≫ 7500r3 Version-
   Arista ≫ 7500r3-24d Version-
   Arista ≫ 7500r3-24p Version-
   Arista ≫ 7500r3-36cq Version-
   Arista ≫ 7500r3k-36cq Version-

Arista ≫ Terminattr Version >= 1.17.0 < 1.19.0

   Arista ≫ 7500r2 Version-
   Arista ≫ 7500r3 Version-
   Arista ≫ 7500r3-24d Version-
   Arista ≫ 7500r3-24p Version-
   Arista ≫ 7500r3-36cq Version-
   Arista ≫ 7500r3k-36cq Version-

Arista ≫ Eos Version >= 4.23 <= 4.23.11

   Arista ≫ 7500r2 Version-
   Arista ≫ 7500r3 Version-
   Arista ≫ 7500r3-24d Version-
   Arista ≫ 7500r3-24p Version-
   Arista ≫ 7500r3-36cq Version-
   Arista ≫ 7500r3k-36cq Version-

Arista ≫ Eos Version >= 4.24 < 4.24.10

   Arista ≫ 7500r2 Version-
   Arista ≫ 7500r3 Version-
   Arista ≫ 7500r3-24d Version-
   Arista ≫ 7500r3-24p Version-
   Arista ≫ 7500r3-36cq Version-
   Arista ≫ 7500r3k-36cq Version-

Arista ≫ Eos Version >= 4.25 < 4.25.8

   Arista ≫ 7500r2 Version-
   Arista ≫ 7500r3 Version-
   Arista ≫ 7500r3-24d Version-
   Arista ≫ 7500r3-24p Version-
   Arista ≫ 7500r3-36cq Version-
   Arista ≫ 7500r3k-36cq Version-

Arista ≫ Eos Version >= 4.26 < 4.26.6

   Arista ≫ 7500r2 Version-
   Arista ≫ 7500r3 Version-
   Arista ≫ 7500r3-24d Version-
   Arista ≫ 7500r3-24p Version-
   Arista ≫ 7500r3-36cq Version-
   Arista ≫ 7500r3k-36cq Version-

Arista ≫ Eos Version >= 4.27 < 4.27.2

   Arista ≫ 7500r2 Version-
   Arista ≫ 7500r3 Version-
   Arista ≫ 7500r3-24d Version-
   Arista ≫ 7500r3-24p Version-
   Arista ≫ 7500r3-36cq Version-
   Arista ≫ 7500r3k-36cq Version-

Arista ≫ Terminattr Version < 1.10.11

   Arista ≫ 7800r3-36p Version-
   Arista ≫ 7800r3-48cq Version-
   Arista ≫ 7800r3k-48cq Version-

Arista ≫ Terminattr Version >= 1.11.0 < 1.16.8

   Arista ≫ 7800r3-36p Version-
   Arista ≫ 7800r3-48cq Version-
   Arista ≫ 7800r3k-48cq Version-

Arista ≫ Terminattr Version >= 1.17.0 < 1.19.0

   Arista ≫ 7800r3-36p Version-
   Arista ≫ 7800r3-48cq Version-
   Arista ≫ 7800r3k-48cq Version-

Arista ≫ Eos Version >= 4.23 <= 4.23.11

   Arista ≫ 7800r3-36p Version-
   Arista ≫ 7800r3-48cq Version-
   Arista ≫ 7800r3k-48cq Version-

Arista ≫ Eos Version >= 4.24 < 4.24.10

   Arista ≫ 7800r3-36p Version-
   Arista ≫ 7800r3-48cq Version-
   Arista ≫ 7800r3k-48cq Version-

Arista ≫ Eos Version >= 4.25 < 4.25.8

   Arista ≫ 7800r3-36p Version-
   Arista ≫ 7800r3-48cq Version-
   Arista ≫ 7800r3k-48cq Version-

Arista ≫ Eos Version >= 4.26 < 4.26.6

   Arista ≫ 7800r3-36p Version-
   Arista ≫ 7800r3-48cq Version-
   Arista ≫ 7800r3k-48cq Version-

Arista ≫ Eos Version >= 4.27 < 4.27.2

   Arista ≫ 7800r3-36p Version-
   Arista ≫ 7800r3-48cq Version-
   Arista ≫ 7800r3k-48cq Version-

Arista ≫ Terminattr Version < 1.10.11

Arista ≫ 7388x5 Version-

Arista ≫ Terminattr Version >= 1.11.0 < 1.16.8

Arista ≫ 7388x5 Version-

Arista ≫ Terminattr Version >= 1.17.0 < 1.19.0

Arista ≫ 7388x5 Version-

Arista ≫ Eos Version >= 4.23 <= 4.23.11

Arista ≫ 7388x5 Version-

Arista ≫ Eos Version >= 4.24 < 4.24.10

Arista ≫ 7388x5 Version-

Arista ≫ Eos Version >= 4.25 < 4.25.8

Arista ≫ 7388x5 Version-

Arista ≫ Eos Version >= 4.26 < 4.26.6

Arista ≫ 7388x5 Version-

Arista ≫ Eos Version >= 4.27 < 4.27.2

Arista ≫ 7388x5 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.15%	0.363

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.1	0.9	5.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N
nvd@nist.gov	3.6	3.9	4.9	AV:N/AC:H/Au:S/C:P/I:P/A:N
psirt@arista.com	6.8	0.9	5.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

CWE-319 Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

https://www.arista.com/en/support/advisories-notices/security-advisories/15484-security-advisory-0077

Vendor Advisory

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2021-28508

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-28508

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-28508

EUVD