Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Arista Metamako Operating System MOS-0.13*, MOS-0.26.7, MOS-0.32.0 Clear all filters
TI-2021-09603 CVE-2021-28495 · GHSA-cpvp-q5mv-cx2q

Improper authentication in Arista Metamako Operating System

Priority MEDIUM 44

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, user authentication can be bypassed when API access is enabled via the JSON-RPC APIs.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0093 Published 2021-09-09 Fixed in MOS-0.26.7, MOS-0.32.0 CWE-287
TI-2021-09606 CVE-2021-28498 · GHSA-rp5c-jhh9-9f2j

Credentials management flaw in Arista Metamako Operating System

Priority LOW 37

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user enable passwords set in clear text could result in unprivileged users getting complete access to the systems.

CVSS 3.1HIGH 8.7 Local Low privileges No interaction EPSS 0.00222 Published 2021-09-09 Fixed in MOS-0.26.7, MOS-0.32.0 CWE-255