CVE-2016-9012

—

CVSS 3.0

8.8 high

EPSS

2%p73

Published

Jan 23, 2017 (Jan 23, 2017)

Modified

Jun 17, 2026

Description

CloudVision Portal (CVP) before 2016.1.2.1 allows remote authenticated users to gain access to the internal configuration mechanisms via the management plane, related to a request to /web/system/console/bundle.

Vendors: arista
Products: cloudvision portal
Weakness: CWE-264
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.