Security Advisory 0115

Security Advisory 0115 . CSAF PDF Date: April 15, 2025 Revision | Date | Changes ---|---|--- 1.0 | April 15, 2025 | Initial release The CVE-ID tracking this issue: CVE-2025-0505 CVSSv3.1 Base Score: 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Common Weakness Enumeration:CWE- CWE-269: Improp...

Security Advisory 0114

Security Advisory 0114 . CSAF PDF Date: April 15, 2025 Revision | Date | Changes ---|---|--- 1.0 | April 15, 2025 | Initial release The CVE-ID tracking this issue: CVE-2024-11186 CVSSv3.1 Base Score: 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Common Weakness Enumeration: CWE-284 Improper...

Security Advisory 0116

Security Advisory 0116 PDF Date: April 15, 2025 Revision | Date | Changes ---|---|--- 1.0 | April 15, 2025 | Initial release The CVE-ID tracking this issue: CVE-2024-8100 CVSSv3.1 Base Score: 8.7 CVSS:3.1AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N Common Weakness Enumeration: CWE-269: Improper Privilege...

CVE-2024-7142

On Arista CloudVision Appliance CVA affected releases running on appliances that support hardware disk encryption DCA-350E-CV only, the disk encryption might not be successfully performed. This results in the disks remaining unsecured and data on them...

CVE-2024-7142 On Arista CloudVision Appliance (CVA) affected releases running on appliances that support hardware disk encryption (DCA-350E-CV only), the disk encryption might not be successfully performed. This results in the disks remaining unsecured and data on them

On Arista CloudVision Appliance CVA affected releases running on appliances that support hardware disk encryption DCA-350E-CV only, the disk encryption might not be successfully performed. This results in the disks remaining unsecured and data on them...

CVE-2024-7142 On Arista CloudVision Appliance (CVA) affected releases running on appliances that support hardware disk encryption (DCA-350E-CV only), the disk encryption might not be successfully performed. This results in the disks remaining unsecured and data on them

On Arista CloudVision Appliance CVA affected releases running on appliances that support hardware disk encryption DCA-350E-CV only, the disk encryption might not be successfully performed. This results in the disks remaining unsecured and data on them...

PT-2025-3691 · Arista · Arista Cloudvision Appliance

Name of the Vulnerable Software and Affected Versions: Arista CloudVision Appliance CVA affected versions not specified Description: The issue affects Arista CloudVision Appliance CVA releases running on appliances that support hardware disk encryption, specifically the DCA-350E-CV model. The...

CloudVision Portal security vulnerabilities

Arista Networks CloudVision Portal is a suite of web-based user management portals for the CloudVision platform from Arista Networks, USA. The product includes features such as network device configuration, compliance management, change management, and network monitoring management. A security...

CVE-2024-7142: Missing Encryption of Sensitive Data

On Arista CloudVision Appliance CVA affected releases running on appliances that support hardware disk encryption DCA-350E-CV only, the disk encryption might not be successfully performed. This results in the disks remaining unsecured and data on them...

Security Advisory 0104

Security Advisory 0104 . CSAF PDF Date: September 24, 2024 Revision | Date | Changes ---|---|--- 1.0 | September 24, 2024 | Initial release The CVE-ID tracking this issue: CVE-2024-7142 CVSSv3.1 Base Score: 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Common Weakness Enumeration: CWE-311:...

Security Advisory 0101

Security Advisory 0101 PDF Date: July 9, 2024 Revision | Date | Changes ---|---|--- 1.0 | July 9, 2024 | Initial release 1.1 | Dec 23, 2024 | Update Vulnerability Assessment for EAP and accounting, Update fixed EOS release The CVE-ID tracking this issue: CVE-2024-3596 CVSSv3.1 Base Score: 9.0...

nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2024-36112 via nautobot (1.5.16)

nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2024-36112 Source advisory: OSV:GHSA-QMJF-WC2H-6X3Q...

nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2024-36112 via nautobot (1.5.16)

nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2024-36112 Source advisory: MEND:CVE-2024-36112...

nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2024-32979 via nautobot (1.5.16)

nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2024-32979 Source advisory: OSV:GHSA-JXGR-GCJ5-CQQG...

nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2024-32979 via nautobot (1.5.16)

nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2024-32979 Source advisory: GHSA-JXGR-GCJ5-CQQG...

nautobot-chatops (>=1.6.0, <=1.7.1), nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0) +7 more potentially affected by CVE-2024-29199 via nautobot (>=1.0.3, <=1.5.16)

nautobot PYPI version =1.0.3, =1.6.0, =1.0.1a0, =1.1.0, =0.9.2.dev0, =1.5.0, =0.9.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2024-29199 Source advisory: GHSA-M732-WVH2-7CQ4...

Security Advisory 0092

Security Advisory 0092 PDF Date: February 20, 2024 Revision | Date | Changes ---|---|--- 1.0 | February 20, 2024 | Initial release CVSSv3.1 Base Score: 9.8 CVSS:3.1AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Common Weakness Enumeration: CWE-1394 Use of default cryptographic key This vulnerability is bein...

nautobot-chatops (>=1.6.0, <=1.7.1), nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0) +7 more potentially affected by CVE-2024-23345 via nautobot (>=1.0.3, <=1.5.16)

nautobot PYPI version =1.0.3, =1.6.0, =1.0.1a0, =1.1.0, =0.9.2.dev0, =1.5.0, =0.9.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2024-23345 Source advisory: OSV:GHSA-V4XV-795H-RV4H...

nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2023-51649 via nautobot (1.5.16)

nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2023-51649 Source advisory: GHSA-VF5M-XRHM-V999...

nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2023-51649 via nautobot (1.5.16)

nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2023-51649 Source advisory: OSV:GHSA-VF5M-XRHM-V999...