Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
| Vendor | Product | Versions |
|---|---|---|
| arista | aos | 8.13.0.0, 8.10.0.0 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| aruba | arubaos | cert_advisory | 90% |
Loading…
Updated affected versions to include 8.10.0.23 and 8.13.3.0, and added CWE-94 (Code Injection) classification based on vulnerability description.
Initial creation
