CVE-2024-8100

On affected versions of the Arista CloudVision Portal CVP on-prem, the time-bound device onboarding token can be used to gain admin privileges on CloudVision...

CVE-2024-8100

The CVE-2024-8100 issue affects Arista CloudVision Portal (CVP on-prem). A time-bound device onboarding token can grant admin privileges to CloudVision, due to improper privilege management. Affected CVP versions include those in the 2024.x and earlier trains (as detailed by Arista’s advisory), w...

PT-2025-20407 · Arista · Arista Cloudvision Portal

Name of the Vulnerable Software and Affected Versions: Arista CloudVision Portal CVP on-prem affected versions not specified Description: The issue allows an attacker to gain admin privileges on CloudVision using a time-bound device onboarding token. Recommendations: At the moment, there is no...