CVE-2020-9015 — CRITICAL (9.8)

Vulnerability Description

Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F devices (and possibly other products) allow attackers to bypass intended TACACS+ shell restrictions via a | character. NOTE: the vendor reports that this is a configuration issue relating to an overly permissive regular expression in the TACACS+ server permitted commands

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Arista	Dcs-7050Qx-32S-R Firmware	4.20.9m
Arista	Dcs-7050Qx-32S-R	-
Arista	Dcs-7050Cx3-32S-R Firmware	4.20.11m
Arista	Dcs-7050Cx3-32S-R	-
Arista	Dcs-7280Sram-48C6-R Firmware	4.22.0.1f
Arista	Dcs-7280Sram-48C6-R	-

References

FAQ

What is CVE-2020-9015?

CVE-2020-9015 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F devices (and possibly other products) allow attackers to bypass intended TACACS+ shell restrictions via a...

How severe is CVE-2020-9015?

CVE-2020-9015 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2020-9015?

Check the references section above for vendor advisories and patch information. Affected products include: Arista Dcs-7050Qx-32S-R Firmware, Arista Dcs-7050Qx-32S-R, Arista Dcs-7050Cx3-32S-R Firmware, Arista Dcs-7050Cx3-32S-R, Arista Dcs-7280Sram-48C6-R Firmware.