Vulnerabilities > Arista > DCS 7280Sram 48C6 R Firmware > Critical

DATE CVE VULNERABILITY TITLE RISK
2020-02-20 CVE-2020-9015 Unspecified vulnerability in Arista products
Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F devices (and possibly other products) allow attackers to bypass intended TACACS+ shell restrictions via a | character.
network
low complexity
arista
critical
9.8