High · 8.7 CVE-2024-8100 EUVD-2024-54464GHSA-j55q-g28w-q6mv

On affected versions of the Arista CloudVision Portal (CVP on-prem), the time-bound device onboarding token can be used to gain admin privileges on CloudVision.

Published May 8, 2025 · Updated May 8, 2025 · Assigned by Arista

Vendor: Arista Networks Product: CloudVision Category: Network devices

Description

Affected products

Vendor	Product	Affected	Fixed
Arista Networks	CloudVision	2024.3.0, 2024.0 – ≤ 2024.2, 2023.3.0 – ≤ 2023.3.1, 2023.0 – ≤ 2023.2, 2022, 2021, 2020, 2019, 2018	—

References

https://www.arista.com/en/support/advisories-notices/security-advisory/21316-security-advisory-0116