CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 10.0. Exploitation may require the attacker to be authenticated.
CVE
CVE-2024-11186
Severity
CRITICAL
CVSS
10
EPSS
0.70%
Original NVD Description
On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts the Arista CloudVision Portal products when run on-premise. It does not impact CloudVision as-a-Service.