An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to gain administrative privileges leading to complete compromise of the AOS-8 host.
| Vendor | Product | Versions |
|---|---|---|
| arista | aos | 8.13.0.0, 8.10.0.0 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| aruba | arubaos | cert_advisory | 90% |
Loading…
Updated affected versions to include 8.10.0.23 and 8.13.3.0, identified vulnerability as code injection (CWE-94), and added technical details about the remote code execution nature.
Initial creation
