CVE-2021-28503

Publication date

2022-02-04 22:29:27

Family

Arista

State

PUBLISHED

Description

The impact of this vulnerability is that Aristas EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI.