My First Vulnerability

CVE-2021-28500 Talkative Marmot For those of you who that don’t want to read the whole back story and just want to see what CVE-2021-28500 (#TalkativeMarmot) is, you can review Arista’s full detailed security advisory here. Essentially, this is an authentication bypass of OpenConfig transport protocols using local accounts with nopassword. In short, the OpenConfig project is a working group that is trying to implement a vendor neutral common data model for configuring and managing networks....

February 21, 2022 · 11 min · Me