What’s Vulnerable › Vulnerabilities
CVE-2024-8100: On affected versions of the Arista CloudVision Portal (CVP on-prem), the time-bound device onboarding token can be used to gain admin privileges on CloudVision.
- Severity: high (CVSS 8.7 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-05-08 · updated 2026-06-17
- Weakness: CWE-269
Description
On affected versions of the Arista CloudVision Portal (CVP on-prem), the time-bound device onboarding token can be used to gain admin privileges on CloudVision.
Affected products
- Arista Networks CloudVision: from 2024.0 through 2024.2; from 2023.3.0 through 2023.3.1; from 2023.0 through 2023.2; 2024.3.0, 2022, 2021, 2020, 2019, 2018
References
Get alerted when CVE-2024-8100 or the next vulnerability affects your stack