Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F devices (and possibly other products) allow attackers to bypass intended TACACS+ shell restrictions via a | character. NOTE: the vendor reports that this is a configuration issue relating to an overly permissive regular expression in the TACACS+ server permitted commands
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多款Arista Networks产品安全漏洞
Vulnerability Description
Arista Networks DCS-7050QX-32S-R 4.20.9M版本、DCS-7050CX3-32S-R 4.20.11M版本和DCS-7280SRAM-48C6-R 4.22.0.1F版本中存在安全漏洞。攻击者可借助‘|’字符利用该漏洞绕过TACACS+ shell限制。
CVSS Information
N/A
Vulnerability Type
N/A