The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI.
The recommended resolution is to upgrade to a remediated software version at your earliest convenience. The vulnerability is fixed in the following EOS versions: 4.26.3 and later releases in the 4.26.x train 4.25.6 and later releases in the 4.25.x train 4.24.8 and later releases in the 4.24.x train 4.23.10 and later releases in the 4.24.x train
Disallowing user certificate authentication via eAPI can be used to mitigate the vulnerability. switch(config)#management security switch(config-mgmt-security)#ssl profile profileEAPI switch(config-mgmt-sec-ssl-profile-profileEAPI)#no trust certificate user.cert switch(config-mgmt-sec-ssl-profile-profileEAPI)#exit
| Product | Vulnerable range | Fixed version | Advisory |
|---|---|---|---|
| Arista Networks Arista EOS | >=EOS-4.23<EOS-4.23.10 | EOS-4.23.10 | advisory ↗ |
| Arista Networks Arista EOS | >=EOS-4.24<EOS-4.24.8 | EOS-4.24.8 | advisory ↗ |
| Arista Networks Arista EOS | >=EOS-4.25<EOS-4.25.6 | EOS-4.25.6 | advisory ↗ |
| Arista Networks Arista EOS | >=EOS-4.26<EOS-4.26.3 | EOS-4.26.3 | advisory ↗ |