CVE-2021-28493 — HIGH (8.4)

Q: How severe is CVE-2021-28493?

CVE-2021-28493 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2021-28493?

Check the references section above for vendor advisories and patch information. Affected products include: Arista Metamako Operating System, Arista 7130.

Vulnerability Description

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, a user may be able to execute commands despite not having the privileges to do so. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.32.0 and prior releases

CVSS Score

8.4

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Arista	Metamako Operating System	<= 0.32.0
Arista	7130	-

Related Weaknesses (CWE)

CWE-287

References

https://www.arista.com/en/support/advisories-notices/security-advisories/12915-sMitigationVendor Advisory
https://www.arista.com/en/support/advisories-notices/security-advisories/12915-sMitigationVendor Advisory

FAQ

What is CVE-2021-28493?

CVE-2021-28493 is a vulnerability with a CVSS score of 8.4 (HIGH). In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, a user may be able to execute commands despite not having the privileges to ...

How severe is CVE-2021-28493?

CVE-2021-28493 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-28493?

Check the references section above for vendor advisories and patch information. Affected products include: Arista Metamako Operating System, Arista 7130.