CVE-2021-28509
Assigner: Arista
Published: 2022-05-25T00:00:00
State: PUBLISHED
affected: product: Arista EOS
vendor: Arista Networks
versions: lessThanOrEqual: 4.23.11
status: affected
version: 4.23
versionType: custom
lessThanOrEqual: 4.24.9
status: affected
version: 4.24
versionType: custom
lessThanOrEqual: 4.25.7
status: affected
version: 4.25
versionType: custom
lessThanOrEqual: 4.26.5
status: affected
version: 4.26
versionType: custom
lessThanOrEqual: 4.27.3
status: affected
version: 4.27
versionType: custom
product: Arista TerminAttr
vendor: Arista Networks
versions: lessThanOrEqual: v1.10.10
status: affected
version:  v1.10
versionType: custom
lessThanOrEqual: v1.16.7
status: affected
version: v1.16
versionType: custom
lessThanOrEqual: v1.19.1
status: affected
version: v1.19
versionType: custom
datePublic: 2022-05-25T00:00:00
descriptions: value: This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak MACsec sensitive data in clear text in CVP to other authorized users, which could cause MACsec traffic to be decrypted or modified by other authorized users on the device.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N
version: 3.1
problemTypes: descriptions: cweId: CWE-255
description: CWE-255 Credentials Management
type: CWE
solutions: value: The recommended resolution is to upgrade to a remediated software version at your earliest convenience.

The vulnerability is fixed in the following versions:

EOS versions:
   4.24.10 and later release in the 4.24.x train
   4.25.8 and later releases in the 4.25.x train
   4.26.6 and later releases in the 4.26.x train
   4.27.4 and later releases in the 4.27.x train
TerminAttr versions:
   TerminAttr v1.10.11 and later releases in the v1.10.x train
   TerminAttr v1.16.8 and later releases in the v1.16.x train
   TerminAttr v1.19.2 and later releases
source: advisory: Security Advisory 0077
defect: CVE-2021-28509
discovery: INTERNAL
title: TerminAttr streams MACsec sensitive data in clear text to other authorized users in CVP
workarounds: value: On the affected versions, the vulnerabilities can be mitigated by disabling TerminAttr agent.
x_generator: engine: Vulnogram 0.0.9