CVE-2021-28505

{"id": "CVE-2021-28505", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "psirt@arista.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2022-04-14T21:15:08.427", "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073", "tags": ["Exploit", "Vendor Advisory"], "source": "psirt@arista.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-863"}]}, {"type": "Secondary", "source": "psirt@arista.com", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL rules in that access list will ignore the specified IP protocol."}, {"lang": "es", "value": "En las plataformas Arista EOS afectadas, si se presenta una regla de coincidencia VXLAN en una lista de acceso IPv4 que es aplicada a la entrada de un puerto/SVI L2 o L3, la regla VXLAN y las reglas ACL posteriores en esa lista de acceso ignorar\u00e1n el protocolo IP especificado"}], "lastModified": "2022-04-26T17:09:51.847", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2A8E9397-1B74-4A40-B8E3-7088A5A45749", "versionEndExcluding": "4.26.4m", "versionStartIncluding": "4.26"}, {"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F85F865B-F425-46DD-B9D4-C96AE100F39F", "versionEndExcluding": "4.27.1f", "versionStartIncluding": "4.27"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:arista:ccs-710p-12:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3671762A-7E5C-47BF-AE10-64F19C82EEDF"}, {"criteria": "cpe:2.3:h:arista:ccs-710p-16p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AC8C4306-2090-4170-B316-79613AA19392"}, {"criteria": "cpe:2.3:h:arista:ccs-720xp-24y6:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "45460268-9775-4047-B36D-1A62480047C7"}, {"criteria": "cpe:2.3:h:arista:ccs-720xp-24zy4:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7A3886D9-AB47-4E4B-95E6-39E31100FE62"}, {"criteria": "cpe:2.3:h:arista:ccs-720xp-48y6:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4D21D207-AD0F-4745-B123-A7219DD6512F"}, {"criteria": "cpe:2.3:h:arista:ccs-720xp-48zc2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B317039B-7365-4348-8286-39128C4B363F"}, {"criteria": "cpe:2.3:h:arista:ccs-720xp-96zc2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2E58B31B-C6C1-4EDC-8D4F-1528C9B1CB8A"}, {"criteria": "cpe:2.3:h:arista:ccs-722xpm-48y4:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "074CBF00-1D2C-4388-874A-62453B1D4564"}, {"criteria": "cpe:2.3:h:arista:ccs-722xpm-48zy8:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D15C1D00-5F35-4F67-8075-D84D3BD9CE73"}, {"criteria": "cpe:2.3:h:arista:dcs-7010tx-48:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9CB43CD4-C96F-483C-B743-3D81C9A65EDF"}, {"criteria": "cpe:2.3:h:arista:dcs-7050cx3-32s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E7C133EA-753A-4770-AEF8-11AC8E901F1A"}, {"criteria": "cpe:2.3:h:arista:dcs-7050cx3m-32s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5D11D6B9-1E68-4A65-A9CD-8DD299EC6B25"}, {"criteria": "cpe:2.3:h:arista:dcs-7050sx3-48c8:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "11B7A876-587F-4C51-BE49-C82F6508C536"}, {"criteria": "cpe:2.3:h:arista:dcs-7050sx3-48yc12:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EEB629B5-7E62-4972-A288-EF76FFA3E441"}, {"criteria": "cpe:2.3:h:arista:dcs-7050sx3-48yc8:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "33079D44-2255-4682-A4BC-4B071D8EDCFA"}, {"criteria": "cpe:2.3:h:arista:dcs-7050sx3-96yc8:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "69F1C5CA-19D7-4F40-93EB-97F44DCD5DCB"}, {"criteria": "cpe:2.3:h:arista:dcs-7050tx3-48c8:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "418E2ED9-B9FC-438D-9F7C-8D6DB7E297AA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@arista.com"}