Skip to content
OpenAdvisories
Critical · 10.0 CVE-2024-11186 EUVD-2024-54463GHSA-mf9v-44vc-62r3

On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts the Arista CloudVision Portal products when run on-prem

Published May 8, 2025 · Updated May 8, 2025 · Assigned by Arista

Vendor: Arista Networks Product: CloudVision Portal Category: Network devices

Description

On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts the Arista CloudVision Portal products when run on-premise. It does not impact CloudVision as-a-Service.

Affected products

VendorProductAffectedFixed
Arista Networks CloudVision Portal 2024.3.0, 2024.2.0 – ≤ 2024.2.1, 2024.1.0 – ≤ 2024.1.2, 2023.3, 2023.2, 2023.1, 2022.3, 2022.2, 2022.1, 2021.3, 2021.2, 2021.1, 2020.3, 2020.2, 2020.1, 2019.1, 2018.2, 2018.1, 2017.2 —

References