CVE-2021-28507

PoC —

CVSS 3.1

7.1 high

EPSS

<1%p50

Published

Jan 14, 2022 (Jan 14, 2022)

Modified

Jun 17, 2026

Description

An issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for OpenConfig gNOI and OpenConfig RESTCONF might be bypassed, which results in the denied requests being forwarded to the agent.

Vendors: arista
Products: eos
Weakness: CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.