Arista Terminattr vulnerabilities

4 CVEs affecting Arista Terminattr, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-28509, published 2022-05-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-17596, published 2019-10-24. High severity, CVSS 7.5. EPSS: 4.7% chance of exploitation in the next 30 days. Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client…
CVE-2021-28501, published 2022-01-14. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local…
CVE-2021-28508, published 2022-05-26. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability…
CVE-2021-28509, published 2022-05-26. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability…