// For flags

CVE-2021-28497

 

Severity Score

7.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, the bash shell might be accessible to unprivileged users in situations where they should not have access. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.26.6 and below releases in the MOS-0.2x train MOS-0.31.1 and below releases in the MOS-0.3x train

En el software MOS (Sistema Operativo Metamako) de Arista, que es compatible con la línea de productos 7130, en determinadas condiciones, el shell bash podría ser accesible a usuarios no privilegiados en situaciones en las que no deberían tener acceso. Este problema afecta a: Sistema Operativo Metamako de Arista Todas las versiones MOS-0.1x train MOS-0.26.6 y versiones inferiores en MOS-0.2x train MOS-0.31.1 y versiones inferiores en MOS-0.3x train

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
Low
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2021-03-16 CVE Reserved
  • 2021-09-09 CVE Published
  • 2023-04-02 EPSS Updated
  • 2024-08-03 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-264: Permissions, Privileges, and Access Controls
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Arista
Search vendor "Arista"
 Metamako Operating System
Search vendor "Arista" for product "Metamako Operating System"
 <= 0.26.6
Search vendor "Arista" for product "Metamako Operating System" and version " <= 0.26.6"
-
Affected
in Arista
Search vendor "Arista"
 7130
Search vendor "Arista" for product "7130"
--
Safe
Arista
Search vendor "Arista"
 Metamako Operating System
Search vendor "Arista" for product "Metamako Operating System"
 >= 0.31.0 < 0.32.0
Search vendor "Arista" for product "Metamako Operating System" and version " >= 0.31.0 < 0.32.0"
-
Affected
in Arista
Search vendor "Arista"
 7130
Search vendor "Arista" for product "7130"
--
Safe