Privilege escalation in Arista Wireless Access Points

This Advisory describes an issue that impacts Arista Wireless Access Points. Any entity with the ability to authenticate via SSH to an affected AP as the “config” user is able to cause a privilege escalation via spawning a bash shell. The SSH CLI session does not require high permissions to exploit this vulnerability, but the config password is required to establish the session. The spawned shell is able to obtain root privileges.

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

在命令中使用的特殊元素转义处理不恰当(命令注入)

Arista Wireless Access Points 安全漏洞

Arista Wireless Access Points是Arista公司的一款三射频 802.11ax 接入点。 Arista Wireless Access Points存在安全漏洞，该漏洞源于任何能够通过 SSH 且以配置用户身份对受影响 AP 进行身份验证的实体都能够通过生成 bash shell 来提升权限。

N/A

N/A