Description
Insufficient validation of inputs supplied through affected VeloCloud Edge management and configuration workflows may allow an authorized management request or configuration value to be interpreted as an operating-system command. Successful exploitation may allow command execution with elevated privileges on the affected VeloCloud Edge.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arista Networks | VeloCloud Edge | 6.4.0 – ≤ 6.4.1.x, 6.1.0 – ≤ 6.1.4.x, 5.2.0 – ≤ 5.2.6.x, 0.0.0 – < 5.2.0 | 5.2.0 |
References
- Security Advisory 0181 vendor-advisory