Approved changes feed: RSS · Atom

cpe:2.3:a:arista_networks:arista_terminattr:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorArista Networks (a0182fe3-0447-5099-835f-342e87c54952)
ProductArista Terminattr (e49d58f2-fca4-5507-b437-ba81bef3b691)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28509 vulnerable 2026-06-03 14:44:18.405588 TerminAttr streams MACsec sensitive data in clear text to other authorized users in CVP
MEDIUM (6.1)
This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak MACsec sensitive data in clear text in CVP to other authorized users, which could cause MACsec traffic to be decrypted or modified by other authorized users on the device.
Published: 2022-05-26T19:50:36.432Z
Updated: 2024-09-16T20:32:30.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28508 vulnerable 2026-06-03 14:44:18.383910 TerminAttr streams IPsec sensitive data in clear text to other authorized users in CVP
MEDIUM (6.8)
This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak IPsec sensitive data in clear text in CVP to other authorized users, which could cause IPsec traffic to be decrypted or modified by other authorized users on the device.
Published: 2022-05-26T19:48:13.716Z
Updated: 2024-09-16T19:47:13.903Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.