On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL rules in that access list will ignore the specified IP protocol.
References
| Link | Resource |
|---|---|
| https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073 | Exploit Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
26 Apr 2022, 17:09
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073 - Exploit, Vendor Advisory | |
| First Time |
Arista ccs-710p-12
Arista dcs-7010tx-48 Arista Arista ccs-720xp-24zy4 Arista ccs-720xp-96zc2 Arista dcs-7050sx3-48yc8 Arista eos Arista ccs-722xpm-48y4 Arista dcs-7050sx3-48yc12 Arista ccs-722xpm-48zy8 Arista dcs-7050cx3-32s Arista dcs-7050sx3-48c8 Arista dcs-7050tx3-48c8 Arista dcs-7050sx3-96yc8 Arista ccs-720xp-48zc2 Arista ccs-710p-16p Arista ccs-720xp-24y6 Arista ccs-720xp-48y6 Arista dcs-7050cx3m-32s |
|
| CPE | cpe:2.3:h:arista:ccs-710p-16p:-:*:*:*:*:*:*:* cpe:2.3:h:arista:dcs-7050cx3-32s:-:*:*:*:*:*:*:* cpe:2.3:h:arista:dcs-7050sx3-48yc8:-:*:*:*:*:*:*:* cpe:2.3:h:arista:ccs-722xpm-48zy8:-:*:*:*:*:*:*:* cpe:2.3:h:arista:dcs-7050sx3-48c8:-:*:*:*:*:*:*:* cpe:2.3:h:arista:ccs-720xp-24y6:-:*:*:*:*:*:*:* cpe:2.3:h:arista:dcs-7050tx3-48c8:-:*:*:*:*:*:*:* cpe:2.3:h:arista:dcs-7050sx3-48yc12:-:*:*:*:*:*:*:* cpe:2.3:h:arista:dcs-7050cx3m-32s:-:*:*:*:*:*:*:* cpe:2.3:h:arista:ccs-710p-12:-:*:*:*:*:*:*:* cpe:2.3:h:arista:ccs-720xp-96zc2:-:*:*:*:*:*:*:* cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:* cpe:2.3:h:arista:ccs-720xp-24zy4:-:*:*:*:*:*:*:* cpe:2.3:h:arista:dcs-7010tx-48:-:*:*:*:*:*:*:* cpe:2.3:h:arista:ccs-720xp-48y6:-:*:*:*:*:*:*:* cpe:2.3:h:arista:ccs-722xpm-48y4:-:*:*:*:*:*:*:* cpe:2.3:h:arista:ccs-720xp-48zc2:-:*:*:*:*:*:*:* cpe:2.3:h:arista:dcs-7050sx3-96yc8:-:*:*:*:*:*:*:* |
|
| CWE | CWE-863 | |
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
14 Apr 2022, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-04-14 21:15
Updated : 2023-12-10 14:22
NVD link : CVE-2021-28505
Mitre link : CVE-2021-28505
CVE.ORG link : CVE-2021-28505
JSON object : View
Products Affected
arista
- dcs-7050cx3-32s
- dcs-7050sx3-48yc12
- dcs-7050sx3-48yc8
- dcs-7050tx3-48c8
- ccs-710p-16p
- eos
- ccs-720xp-48zc2
- ccs-722xpm-48zy8
- dcs-7050sx3-96yc8
- ccs-710p-12
- ccs-720xp-96zc2
- dcs-7010tx-48
- dcs-7050sx3-48c8
- dcs-7050cx3m-32s
- ccs-720xp-48y6
- ccs-722xpm-48y4
- ccs-720xp-24y6
- ccs-720xp-24zy4