CVE-2021-28493CWE-287

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, a user may be able to execute…

High · published September 9, 2021

CVSS v3.1
8.4
EPSS
0%
Percentile
11.7
In the wild
Unconfirmed
What it is

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, a user may be able to execute commands despite not having the privileges to do so. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.32.0 and prior releases

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00218 · 11.7th percentile
Weakness
CWE-287 · Improper Authentication
Published
2021-09-09T12:45Z
EPSS history
Timeline
  • 09 SEP 12:45Z
    In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, a user may be able to execute…
    cvelistv5