Arista DCS-7280SRAM-48C6-R Firmware 4.22.0.1F
Approved changes feed: RSS · Atom
cpe:2.3:o:arista:dcs-7280sram-48c6-r_firmware:4.22.0.1f:*:*:*:*:*:*:*
part: o version: 4.22.0.1f update: *
| Vendor | Arista (6527c28e-420f-5910-9f50-47683159f01a) |
|---|---|
| Product | Dcs 7280Sram 48C6 R Firmware (bcf26b19-b23c-5af9-9f96-6212d2aa408b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-9015 |
vulnerable | 2026-06-08 05:27:20.249245 |
Details available
Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F devices (and possibly other products) allow attackers to bypass intended TACACS+ shell restrictions via a | character. NOTE: the vendor reports that this is a configuration issue relating to an overly permissive regular expression in the TACACS+ server permitted commands
Published: 2020-02-20T21:39:13.000Z
Updated: 2024-08-04T10:19:19.696Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.