CVE-2021-28508

TerminAttr streams IPsec sensitive data in clear text to other authorized users in CVP

MEDIUM

6.1

CVSS Score

Published: May 26, 2022 at 07:48 PM UTC

Updated: June 17, 2026 at 03:46 AM UTC

47 products affected across 2 vendorsEosTerminattr7500R3-36Cq

Using Arista EOS by Arista Networks?

Get instant alerts when new vulnerabilities affect Arista EOS - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.1

Exploit prediction

EPSS 0.5%

Description

This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak IPsec sensitive data in clear text in CVP to other authorized users, which could cause IPsec traffic to be decrypted or modified by other authorized users on the device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Eos · Arista

95%

4.23 ≤ v ≤ 4.23.114.24 ≤ v < 4.24.104.25 ≤ v < 4.25.84.26 ≤ v < 4.26.64.27 ≤ v < 4.27.2

Affected range stops below 4.24.10, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.25.8, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.26.6, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.27.2, so it looks safe — our inference, not a vendor statement

arista-7050cx3-32s (environment) · arista-7050cx3m-32s (environment) · arista-7050sx3-48c8 (environment) · arista-7050sx3-48yc (environment) · arista-7050sx3-48yc12 (environment) · arista-7050sx3-48yc8 (environment) · arista-7050sx3-96yc8 (environment) · arista-7050tx3-48c8 (environment) · arista-7280cr2ak-30 (environment) · arista-7280cr2k-60 (environment) · arista-7280cr3-32d4 (environment) · arista-7280cr3-32p4 (environment) · arista-7280cr3-96 (environment) · arista-7280cr3k-32d4 (environment) · arista-7280cr3k-32p4 (environment) · arista-7280cr3k-96 (environment) · arista-7280dr3-24 (environment) · arista-7280dr3k-24 (environment) · arista-7280pr3-24 (environment) · arista-7280pr3k-24 (environment) · arista-7280r2 (environment) · arista-7280r3 (environment) · arista-7280sr3-48yc8 (environment) · arista-7280sr3k-48yc8 (environment) · arista-7388x5 (environment) · arista-7500r2 (environment) · arista-7500r3 (environment) · arista-7500r3-24d (environment) · arista-7500r3-24p (environment) · arista-7500r3-36cq (environment) · arista-7500r3k-36cq (environment) · arista-7800r3-36p (environment) · arista-7800r3-48cq (environment) · arista-7800r3k-48cq (environment) · arista-ccs-722xpm-48y4 (environment) · arista-ccs-722xpm-48zy8 (environment) · arista-dcs-7050cx3-32s (environment) · arista-dcs-7050cx3-32s-r (environment) · arista-dcs-7050cx3m-32s (environment) · arista-dcs-7050sx3-48c8 (environment) · arista-dcs-7050sx3-48yc12 (environment) · arista-dcs-7050sx3-48yc8 (environment) · arista-dcs-7050sx3-96yc8 (environment)

Terminattr · Arista

95%

v < 1.10.111.11.0 ≤ v < 1.16.81.17.0 ≤ v < 1.19.0

Affected range stops below 1.10.11, so it looks safe — our inference, not a vendor statement

Affected range stops below 1.16.8, so it looks safe — our inference, not a vendor statement

Affected range stops below 1.19.0, so it looks safe — our inference, not a vendor statement

Arista EOS · Arista Networks

60%

4.23 ≤ v ≤ 4.23.114.24 ≤ v ≤ 4.24.94.25 ≤ v ≤ 4.25.74.26 ≤ v ≤ 4.26.54.27 ≤ v ≤ 4.27.34.23 4.24 4.25 4.26 4.27

Terminattr · Arista Networks

60%

v1.10 ≤ v ≤ v1.10.10v1.16 ≤ v ≤ v1.16.7v1.18 ≤ v ≤ v1.18.11.10 1.16 1.18