Medium severity · published May 26, 2022
CVE-2021-28509
This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols
6.1
CVSS
0.5%
EPSS
No
On KEV
Description
This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak MACsec sensitive data in clear text in CVP to other authorized users, which could cause MACsec traffic to be decrypted or modified by other authorized users on the device.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
Required
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EO
Eos · Arista
4.23 through 4.23.11; 4.24 before 4.24.10; 4.25 before 4.25.8; 4.26 before 4.26.6; 4.27 before 4.27.4; 4.23 through 4.23.11; +24 more · source: NVD
TE
Terminattr · Arista
before 1.10.11; 1.11.0 before 1.16.8; 1.17.0 before 1.19.2; before 1.10.11; 1.11.0 before 1.16.8; 1.17.0 before 1.19.2; +12 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-28509
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-28509
Exploit
https://www.arista.com/en/support/advisories-notices/security-advisories/15484-security-advisory-0077
More from Eos
9.8
CVE-2014-7169
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
9.8
CVE-2014-6271
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
5.8
CVE-2026-7473
Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass
9.8
CVE-2021-28503
The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to…
9.8
CVE-2020-10188
utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the…