CVE-2021-28504: Arista Eos

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol field as expected.

Affected products

• Arista Eos: from 4.26, before 4.26.4m (fixed in 4.26.4m); from 4.27, before 4.27.1f (fixed in 4.27.1f)

Published 2022-04-01. Last modified 2026-06-17.