Arista Update
3233Warning Date
Severity Level
Warning Number
Target Sector
7 November, 2019
● High
2019-600
All
Description:
Arista has released security update to address multiple vulnerabilities in the following products:
- TerminAttr v1.6.0 | v1.5.9: 1.5.9
- OpenConfig 4.23.0F | 4.22.2F and earlier | 4.21.7.1M and earlier 4.20.14M and earlier | 4.19.13M and earlier
- CloudVision Portal (CVP) 2018.2.5 and earlier
- WiFi software 8.7.3-26 and earlier
Threats:
Attacker could exploit these vulnerabilities by conducting denial of service attack (DoS).
Best practice and Recommendations:
The CERT team encourages users to update the affected versions and to review Arista security advisory:
https://www.arista.com/en/support/advisories-notices/security-advisories/8762-security-advisory-43