Approved changes feed: RSS · Atom

cpe:2.3:a:arista:metamako_operating_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorArista (6527c28e-420f-5910-9f50-47683159f01a)
ProductMetamako Operating System (0e24abff-6d7b-5ba1-9fb9-09f7526c5508)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28499 vulnerable 2026-06-08 05:31:24.415728 Details available
MEDIUM (6.3)
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user account passwords set in clear text could leak to users without any password. This issue affects: Arista Metamako Operating System MOS-0.18 and post releases in the MOS-0.1x train All releases in the MOS-0.2x train MOS-0.31.1 and prior releases in the MOS-0.3x train
Published: 2021-09-09T12:38:50.000Z
Updated: 2024-08-03T21:47:32.839Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28498 vulnerable 2026-06-08 05:31:24.415247 Details available
HIGH (8.7)
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user enable passwords set in clear text could result in unprivileged users getting complete access to the systems. This issue affects: Arista Metamako Operating System MOS-0.13 and post releases in the MOS-0.1x train MOS-0.26.6 and prior releases in the MOS-0.2x train MOS-0.31.1 and prior releases in the MOS-0.3x train
Published: 2021-09-09T12:38:21.000Z
Updated: 2024-08-03T21:47:32.550Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28497 vulnerable 2026-06-08 05:31:24.414726 Details available
MEDIUM (4.4)
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, the bash shell might be accessible to unprivileged users in situations where they should not have access. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.26.6 and below releases in the MOS-0.2x train MOS-0.31.1 and below releases in the MOS-0.3x train
Published: 2021-09-09T12:41:37.000Z
Updated: 2024-08-03T21:47:32.634Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28495 vulnerable 2026-06-08 05:31:24.411086 Details available
HIGH (7.2)
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, user authentication can be bypassed when API access is enabled via the JSON-RPC APIs. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.13 and post releases in the MOS-0.1x train MOS-0.26.6 and below releases in the MOS-0.2x train MOS-0.31.1 and below releases in the MOS-0.3x train
Published: 2021-09-09T12:43:57.000Z
Updated: 2024-08-03T21:47:32.686Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28494 vulnerable 2026-06-08 05:31:24.410660 Details available
CRITICAL (9.6)
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, authentication is bypassed by unprivileged users who are accessing the Web UI. This issue affects: Arista Metamako Operating System MOS-0.34.0 and prior releases
Published: 2021-09-09T12:46:58.000Z
Updated: 2024-08-03T21:47:31.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28493 vulnerable 2026-06-08 05:31:24.408398 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.