CVE-2021-28496

On systems running Arista EOS and CloudEOS with the affected release version, when using shared secret profiles the password configured for use by BiDirectional Forwarding Detection (BFD) will be leaked when displaying output over eAPI or other JSON outputs to other authenticated users on the device. The affected EOS Versions are: all releases in 4.22.x train, 4.23.9 and below releases in the 4.23.x train, 4.24.7 and below releases in the 4.24.x train, 4.25.4 and below releases in the 4.25.x train, 4.26.1 and below releases in the 4.26.x train

CVSS v3 6.5 MEDIUM
CVSS v2.0 4.0 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://www.arista.com/en/support/advisories-notices/security-advisories/13243-security-advisory-0069	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:arista:eos::::::::
	cpe:2.3:o:arista:eos::::::::
	cpe:2.3:o:arista:eos::::::::
	cpe:2.3:o:arista:eos::::::::
	cpe:2.3:o:arista:eos::::::::

History

30 Jul 2022, 12:29

Type	Values Removed	Values Added
CWE	~~CWE-311~~	CWE-522

28 Oct 2021, 16:48

Type	Values Removed	Values Added
CWE		CWE-311
CPE		cpe:2.3:o:arista:eos::::::::
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : 4.0 v3 : 6.5
References	~~(MISC) https://www.arista.com/en/support/advisories-notices/security-advisories/13243-security-advisory-0069 -~~	(MISC) https://www.arista.com/en/support/advisories-notices/security-advisories/13243-security-advisory-0069 - Vendor Advisory

21 Oct 2021, 17:28

Type	Values Removed	Values Added
New CVE

Information

Published : 2021-10-21 17:15

Updated : 2024-02-04 22:08

NVD link : CVE-2021-28496

Mitre link : CVE-2021-28496

CVE.ORG link : CVE-2021-28496

JSON object : View

Products Affected

arista

eos

CWE

CWE-522

Insufficiently Protected Credentials

CWE-311

Missing Encryption of Sensitive Data

{"id": "CVE-2021-28496", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "psirt@arista.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.1}]}, "published": "2021-10-21T17:15:07.740", "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisories/13243-security-advisory-0069", "tags": ["Vendor Advisory"], "source": "psirt@arista.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-522"}]}, {"type": "Secondary", "source": "psirt@arista.com", "description": [{"lang": "en", "value": "CWE-311"}]}], "descriptions": [{"lang": "en", "value": "On systems running Arista EOS and CloudEOS with the affected release version, when using shared secret profiles the password configured for use by BiDirectional Forwarding Detection (BFD) will be leaked when displaying output over eAPI or other JSON outputs to other authenticated users on the device. The affected EOS Versions are: all releases in 4.22.x train, 4.23.9 and below releases in the 4.23.x train, 4.24.7 and below releases in the 4.24.x train, 4.25.4 and below releases in the 4.25.x train, 4.26.1 and below releases in the 4.26.x train"}, {"lang": "es", "value": "En los sistemas que ejecutan Arista EOS y CloudEOS con la versi\u00f3n afectada, cuando son usados perfiles de secreto compartido, la contrase\u00f1a configurada para su uso por BiDirectional Forwarding Detection (BFD) ser\u00e1 filtrada cuando es mostrada la salida a trav\u00e9s de eAPI u otras salidas JSON a otros usuarios autenticados en el dispositivo. Las Versiones de EOS afectadas son: todas las versiones 4.22.x train, versiones 4.23.9 y por debajo del train 4.23.x, versiones 4.24.7 y por debajo del train 4.24.x, versiones 4.25.4 y por debajo del train 4.25.x, versiones 4.26.1 y por debajo del train 4.26.x"}], "lastModified": "2022-07-30T12:29:59.813", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3770F52F-3DBE-4519-A4F1-85225CF7D67A", "versionEndIncluding": "4.22.7m", "versionStartIncluding": "4.22"}, {"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3A3A22E-C028-436D-9B9B-B48DE5B02432", "versionEndExcluding": "4.23.10", "versionStartIncluding": "4.23"}, {"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62AAA114-6AAE-4CD8-A2CE-28FC6ED075FA", "versionEndExcluding": "4.24.8", "versionStartIncluding": "4.24"}, {"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7087C7A-B407-4835-B8E6-07637124ECEA", "versionEndExcluding": "4.25.5", "versionStartIncluding": "4.25"}, {"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46FBEEA9-FB19-4ACB-A7A6-336692848CD5", "versionEndExcluding": "4.26.2", "versionStartIncluding": "4.26"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@arista.com"}