Arista Metamako Operating System vulnerabilities

6 CVEs affecting Arista Metamako Operating System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-28499, published 2021-09-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-28495, published 2021-09-09. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, user authentication can be bypassed when API access is enabled via the…
CVE-2021-28494, published 2021-09-09. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, authentication is bypassed by unprivileged users who are accessing the Web…
CVE-2021-28497, published 2021-09-09. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, the bash shell might be accessible to unprivileged users in situations…
CVE-2021-28498, published 2021-09-09. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user enable passwords set in clear text could result in unprivileged users getting complete access to…
CVE-2021-28493, published 2021-09-09. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, a user may be able to execute commands despite not having the privileges to…
CVE-2021-28499, published 2021-09-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user account passwords set in clear text could leak to users without any password. This issue…