CVE-2021-28503 — In Arista's EOS software affected releases, eAPI might skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI.
The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers t…
Published: 2022-02-04 · CVSS: 7.4 · CVSS 3.1
The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7