cbcvebase.

Arista Dcs-7050Cx3-32S-R Firmware vulnerabilities

1 known vulnerability affecting arista/dcs-7050cx3-32s-r_firmware.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2020-9015P2CRITICALCVSS 9.8PoCv4.20.11m2020-02-20
CVE-2020-9015 [CRITICAL] CVE-2020-9015: Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F devic Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F devices (and possibly other products) allow attackers to bypass intended TACACS+ shell restrictions via a | character. NOTE: the vendor reports that this is a configuration issue relating to an overly permissive regular expression in the TACACS+ server permitted c
nvd
Arista Dcs-7050Cx3-32S-R Firmware vulnerabilities | cvebase