Description
An XML External Entity (XXE) injection vulnerability in the WiFi-server Spectralight application allows any authenticated user to send malicious requests, leading to arbitrary local file disclosure and partial denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arista Networks | CloudVision CUE | 2021.2.0 – ≤ 2026.2.0 | — |