Description
Insufficient validation of inputs supplied through affected VeloCloud Edge management and configuration workflows may allow an authorized management request or configuration value to be interpreted as an operating-system command. Successful exploitation may allow command execution with elevated privileges on the affected VeloCloud Edge.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Arista Networks VeloCloud Edge
Default version status: unaffected
6.4.0 to ≤ 6.4.1.xaffected6.1.0 to ≤ 6.1.4.xaffected5.2.0 to ≤ 5.2.6.xaffected0.0.0 to < 5.2.0affected