Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
In Arista's EOS software affected releases, eAPI might skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI.
Vulnerability Description
The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
Vulnerability Type
使用基本弱点进行的认证绕过
Vulnerability Title
Arista Networks Arista EOS 授权问题漏洞
Vulnerability Description
Arista Networks Arista EOS是美国Arista Networks公司的一款应用于数据中心和云网络中心的可扩展操作系统。 Arista EOS 构建的云架构可扩展到数十万个计算和存储节点，并具有大规模工作的管理和配置功能，通过其可编程性，EOS 支持一系列软件应用程序，可提供工作流程自动化、高可用性、前所未有的网络可视性和分析以及与虚拟化、管理、自动化和编排服务的各种第三方应用程序的快速集成。 Arista Networks Arista EOS eAPI 存在授权问题漏洞，该漏洞源
CVSS Information
N/A
Vulnerability Type
N/A