Lucene search
MitreCVELIST:CVE-2020-9015HistoryFeb 20, 2020 - 9:39 p.m.
CVE-2020-9015
2020-02-2021:39:13
mitre
www.cve.org
3
Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F devices (and possibly other products) allow attackers to bypass intended TACACS+ shell restrictions via a | character. NOTE: the vendor reports that this is a configuration issue relating to an overly permissive regular expression in the TACACS+ server permitted commands
Related
cve
cve
CVE-2020-9015
2020-02-20 22:15:12
prion
prion
Design/Logic Flaw
2020-02-20 22:15:00
packetstorm
packetstorm
Arista Restricted Shell Escape / Privilege Escalation
2020-06-16 00:00:00
metasploit
metasploit
Arista restricted shell escape (with privesc)
2020-04-21 19:21:52
nvd
nvd
CVE-2020-9015
2020-02-20 22:15:12
zdt
zdt
Arista Restricted Shell Escape / Privilege Escalation Exploit
2020-06-16 00:00:00
0daydb
0daydb
Arista Restricted Shell Escape - Privilege Escalation
2020-06-21 09:00:33