CVE Vulnerability Catalog

On Arista EOS platforms with OpenConfig and a gNMI server, when gNSI Pathz is configured with a policy containing both a group rule and a user rule for the same path, gNMI may fail to enforce the policy correctly. Under certain conditions, an authenticated user may gain unauthorized read or write access to gNMI paths that the Pathz policy intended to restrict.

On Arista EOS platforms with OpenConfig-related services (gNMI, gNSI, RESTCONF, NETCONF), sensitive requests and responses may be unintentionally logged. These logs may be stored locally or sent to remote accounting servers. Examples include sensitive CLI commands and sensitive OpenConfig YANG leafs.

In affected versions of Octopus Server, a user with permission to modify non built-in external feeds could exploit a path traversal flaw to overwrite arbitrary files on the server, potentially leading to remote code execution in some configurations.

XikeStor Layer3 switches lack authentication for downloading configuration data. An unauthenticated attacker may retrieve configuration data containing network configurations and passwords to operate the device improperly or use it as a jump host.

QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker logged into a Windows PC where the affected product's client is installed to execute arbitrary commands with SYSTEM privileges.

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a PUT request with admin credentials, allowing execution of commands with root privileges on the device.

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a crafted GET request with admin credentials, allowing execution of commands with root privileges on the device.

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted PUT request with admin credentials, allowing execution of commands with root privileges on the device.

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted GET request with admin credentials, allowing execution of commands with root privileges on the device.

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted DELETE request with admin credentials, allowing execution of commands with root privileges on the device.

A low-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted GET request with user credentials, allowing execution of commands with root privileges on the device.

A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files endpoint using operator credentials, allowing execution of commands with root privileges on the device.

An unauthenticated remote attacker can exploit a path traversal vulnerability in the /index.php/view_uploaded_iodd_file endpoint, allowing the SSH server's private keys to be read.

A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/save_iodd_parameters endpoint using a valid operator cookie, allowing execution of arbitrary PHP code on the device.

A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/get_iodd_port_info endpoint using a valid user cookie, allowing execution of arbitrary PHP code on the device.

A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/save_iodd_parameters endpoint using operator credentials, allowing execution of commands with root privileges on the device.

A low-privileged remote attacker can exploit improper authorization in the /index.php/attached_devices_tab/do_upload endpoint to upload IODD files to the device, potentially altering device behavior or causing system crashes.

A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/parameterManage endpoint using user credentials, allowing execution of commands with root privileges on the device.

A low-privileged remote attacker can exploit a command injection vulnerability in the Field_Shadow_Password class using operator credentials, allowing execution of commands with root privileges on the device.

A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attached_devices_tab/do_upload endpoint using operator credentials, allowing execution of commands with root privileges on the device.