Advisories · Technology
Arista Networks DANZ Monitoring Fabric.
Every CVE that names Arista Networks DANZ Monitoring Fabric among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.9 Medium
Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO
- Arista Networks DANZ Monitoring Fabric
- Weak cryptography or TLS
- CVSS 4.3 Medium
On affected platforms, restricted users could view sensitive portions of the config database via a debug API (e.g., user password hashes)
- Arista Networks DANZ Monitoring Fabric
- Information disclosure
- CVSS 5.3 Medium
On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a conf…
- Arista Networks DANZ Monitoring Fabric
- Authentication bypass
- CVSS 7.5 High
On affected platforms, restricted users could use SSH port forwarding to access host-internal services
- Arista Networks DANZ Monitoring Fabric
- Broken access control
- CVSS 7.8 High
On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges.
- Arista Networks DANZ Monitoring Fabric
- Broken access control