Read the docs
TI-2021-09604 Aliases CVE-2021-28496GHSA-v5xw-5jg8-4q3j

Insufficiently protected credentials in Arista EOS

Priority LOW 29CWE-311Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-311.

Summary

On systems running Arista EOS and CloudEOS with the affected release version, when using shared secret profiles the password configured for use by BiDirectional Forwarding Detection (BFD) will be leaked when displaying output over eAPI or other JSON outputs to other authenticated users on the device. The affected EOS Versions are: all releases in 4.22.x train, 4.23.9 and below releases in the 4.23.x train, 4.24.7 and below releases in the 4.24.x train, 4.25.4 and below releases in the 4.25.x train, 4.26.1 and below releases in the 4.26.x train

Why it matters now

EPSS 0.0043 37th percentileScored 2026-11-07
Fix Fixed Arista EOS (Arista Networks): EOS-4.23.10, EOS-4.24.8, EOS-4.25.5 +1

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
AristaArista EOSEOS-4.22 – EOS-4.22.12; EOS-4.23 to before EOS-4.23.10; EOS-4.24 to before EOS-4.24.8; EOS-4.25 to before EOS-4.25.5; EOS-4.26 to before EOS-4.26.2EOS-4.23.10, EOS-4.24.8, EOS-4.25.5, EOS-4.26.2Patch availableCNA
  • Arista EOS VendorArista Affected EOS-4.22 – EOS-4.22.12; EOS-4.23 to before EOS-4.23.10; EOS-4.24 to before EOS-4.24.8; EOS-4.25 to before EOS-4.25.5; EOS-4.26 to before EOS-4.26.2 Fixed in EOS-4.23.10, EOS-4.24.8, EOS-4.25.5, EOS-4.26.2 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*4.22 – 4.22.7m; 4.23 to before 4.23.10; 4.24 to before 4.24.8; 4.25 to before 4.25.5; 4.26 to before 4.26.2VulnerableArista
  • cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:* Versions 4.22 – 4.22.7m; 4.23 to before 4.23.10; 4.24 to before 4.24.8; 4.25 to before 4.25.5; 4.26 to before 4.26.2 Vulnerable ·Arista

Remediation

  • Fix · CNA Arista EOS (Arista Networks) Fixed in EOS-4.23.10, EOS-4.24.8, EOS-4.25.5, EOS-4.26.2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-28496
  2. 2026-10-03 Alias added: GHSA-v5xw-5jg8-4q3j

References

Advisory 1

  • TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-06569 Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass KEVCVSS 4.0MEDIUM 6.9
  • TI-2017-10594 Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a… CVSS 3.1CRITICAL 9.8
  • TI-2024-05929 Openssh: regresshion - race condition in ssh allows rce/dos CVSS 3.1HIGH 8.1
  • TI-2020-08209 utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute… CVSS 3.1CRITICAL 9.8
See all 45 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences