What is CVE-2021-28511?

CVE-2021-28511 is a medium-severity vulnerability in Arista 7050cx3-32s, classified under Improper Access Control. CVSS score: 5.8/10. Published 2022-08-05.

How severe is CVE-2021-28511?

Medium severity. CVSS v3 base score is 5.8 out of 10.

Vulnerability in Arista 7050cx3-32s

CVE-2021-28511

This advisory documents the impact of an internally found vulnerability in Arista EOS for security ACL bypass. The impact of this vulnerability is that the security ACL drop rule might be bypassed if a NAT ACL rule filter with permit actio…

EPSS: 0.005 (40.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N.

Affected products

Arista 7050cx3-32s
Arista 7050cx3m-32s
Arista 7050sx3-48c8
Arista 7050sx3-48yc
Arista 7050sx3-48yc12
Arista 7050sx3-48yc8
Arista 7050sx3-96yc8
Arista 7050tx3-48c8
Arista 720xp-24y6
Arista 720xp-24zy4

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

psirt@arista.com (Exploit, x_refsource_MISC, Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2021-28511?: CVE-2021-28511 is a medium-severity vulnerability in Arista 7050cx3-32s, classified under Improper Access Control. CVSS score: 5.8/10. Published 2022-08-05.
How severe is CVE-2021-28511?: Medium severity. CVSS v3 base score is 5.8 out of 10.