← Back to browse · API

CVE-2024-11186

Severity
CRITICAL
CVSS
10.0
EPSS
0.00751
Risk score
40.26
CISA KEV
No
PoC
No
Published
2025-05-08
Modified
2025-05-08
First seen
2026-08-07
Aliases
EUVD-2024-54463, GHSA-MF9V-44VC-62R3
Products
Arista Networks:CloudVision Portal 2017.2, Arista Networks:CloudVision Portal 2018.1, Arista Networks:CloudVision Portal 2018.2, Arista Networks:CloudVision Portal 2019.1, Arista Networks:CloudVision Portal 2020.1, Arista Networks:CloudVision Portal 2020.2, Arista Networks:CloudVision Portal 2020.3, Arista Networks:CloudVision Portal 2021.1, Arista Networks:CloudVision Portal 2021.2, Arista Networks:CloudVision Portal 2021.3, Arista Networks:CloudVision Portal 2022.1, Arista Networks:CloudVision Portal 2022.2, Arista Networks:CloudVision Portal 2022.3, Arista Networks:CloudVision Portal 2023.1, Arista Networks:CloudVision Portal 2023.2, Arista Networks:CloudVision Portal 2023.3, Arista Networks:CloudVision Portal 2024.1.0 ≤2024.1.2, Arista Networks:CloudVision Portal 2024.2.0 ≤2024.2.1, Arista Networks:CloudVision Portal 2024.3.0
Sources
euvd EUVD-2024-54463

Description

On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts the Arista CloudVision Portal products when run on-premise. It does not impact CloudVision as-a-Service.

References