CVE-2024-11186 — Improper Authentication in Networks Cloudvision Portal
Severity
10.0CRITICALNVD
EPSS
0.3%
top 42.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 8
Description
On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts the Arista CloudVision Portal products when run on-premise. It does not impact CloudVision as-a-Service.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HExploitability: 3.9 | Impact: 6.0
Affected Packages1 packages
🔴Vulnerability Details
2GHSA▶
GHSA-mf9v-44vc-62r3: On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on manage↗2025-05-08
CVEList▶
On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts↗2025-05-08