CVSS: 7.5EPSS: 0%CPEs: 19EXPL: 1CVE-2021-28505 – On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL rules in that access list will ignore the specified IP protocol.
https://notcve.org/view.php?id=CVE-2021-28505
On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL rules in that access list will ignore the specified IP protocol. En las plataformas Arista EOS afectadas, si se presenta una regla de coincidencia VXLAN en una lista de acceso IPv4 que es aplicada a la entrada de un puerto/SVI L2 o L3, la regla VXLAN y las reglas ACL posteriores en esa lista de acceso ignorarán el protocolo IP especificado • https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073 • CWE-284: Improper Access Control CWE-863: Incorrect Authorization •
CVSS: 7.5EPSS: 0%CPEs: 19EXPL: 0CVE-2021-28504 – On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol fi ...
https://notcve.org/view.php?id=CVE-2021-28504
On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol field as expected. En los productos de la familia Arista Strata que tienen habilitada la funcionalidad "perfil TCAM", cuando la lista de acceso IPv4 del puerto presenta una regla que coincide con "vxlan" como protocolo, esa regla y las reglas posteriores (reglas declaradas después de ella en la ACL) no coinciden con el campo de protocolo IP como era esperado • https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073 • CWE-284: Improper Access Control CWE-863: Incorrect Authorization •