CVE:CVE-2020-9015
CNNVD:CNNVD-202002-1041
Arista Networks DCS-7050QX-32S-R 4.20.9M版本、DCS-7050CX3-32S-R 4.20.11M版本和DCS-7280SRAM-48C6-R 4.22.0.1F版本中存在安全漏洞。攻击者可借助‘|’字符利用该漏洞绕过TACACS+ shell限制。
solution:Upgrade arista dcs-7050qx-32s-r_firmware to a higher version than 4.20.9m,and avoid the version 4.20.9m; Upgrade arista dcs-7050cx3-32s-r_firmware to a higher version than 4.20.11m,and avoid the version 4.20.11m; Upgrade arista dcs-7280sram-48c6-r_firmware to a higher version than 4.22.0.1f,and avoid the version 4.22.0.1f