Arista DCS-7050QX-32S-R
Approved changes feed: RSS · Atom
cpe:2.3:h:arista:dcs-7050qx-32s-r:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Arista (6527c28e-420f-5910-9f50-47683159f01a) |
|---|---|
| Product | Dcs 7050Qx 32S R (627d9032-692f-5f67-ae9e-481ac1f570b2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-9015 |
not_vulnerable | 2026-06-08 05:27:20.247585 |
Details available
Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F devices (and possibly other products) allow attackers to bypass intended TACACS+ shell restrictions via a | character. NOTE: the vendor reports that this is a configuration issue relating to an overly permissive regular expression in the TACACS+ server permitted commands
Published: 2020-02-20T21:39:13.000Z
Updated: 2024-08-04T10:19:19.696Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.