Arista Alert
2452Warning Date
Severity Level
Warning Number
Target Sector
30 March, 2022
● High
2022-4574
All
Arista has released security updates to address a vulnerability in the following products:
- Arista EOS-based products:
- 7010T series
- 7020R series
- 7050X/X2/X4 series
- 7060X/X2/X3/X4/X5 series
- 7130 series
- 7150 series
- 7160 series
- 7170 series
- 7250X series
- 7260X/X3 series
- 7280E/R/R2/R3 series
- 7300X/X3 series
- 7320X series
- 7358X4 series
- 7368X4 series
- 7388X5 series
- 7500E/R/R2/R3 series
- 7800R3 series
- Arista Wireless Access Points
- CloudVision WiFi virtual appliance or physical appliance
- CloudVision WiFi cloud service delivery
- CloudVision Portal, virtual appliance or physical appliance
- CloudVision as-a-Service
- Arista 7130 Systems running MOS
- Arista Converged Cloud Fabric and DANZ Monitoring Fabric (Formerly Big Switch Nodes for BCF and BMF)
- Awake Security Platform
An attacker could exploit these vulnerabilities by:
- Improper Access Control
- Sensitive information disclosure
The CERT team encourages users to review Arista security advisory and apply the necessary updates: