[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxP0QVTXbm2YX_NLZTmH6bu81s3n6t_UqxbIguvWx3lA":3,"g5a-risk:CVE-2020-9015":169},{"success":4,"data":5,"meta":167},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":66,"references":67,"referencesCount":85,"weaknesses":86,"weaknessesCount":90,"isActivelyExploited":91,"cisaInfo":27,"otxData":27,"relatedBlogPosts":92,"seoMetadata":93,"configurations":118,"relatedVendorCves":151,"notableEvents":152},"CVE-2020-9015","What is CVE-2020-9015?","Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F devices (and possibly other products) allow attackers to bypass intended TACACS+ shell restrictions via a | character. NOTE: the vendor reports that this is a configuration issue relating to an overly permissive regular expression in the TACACS+ server permitted commands","Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F devices (and possibly other products) allow attackers to bypas...","2020-02-20T22:15:12.177","2024-08-04T11:15:38.97",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.16464,[39,39,39,39,39,39,39],"Critical",[43,48,52,56,59,63],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"arista","dcs-7050qx-32s-r_firmware","4.20.9m","cpe:2.3:o:arista:dcs-7050qx-32s-r_firmware:4.20.9m:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":4},"dcs-7050qx-32s-r","-","cpe:2.3:h:arista:dcs-7050qx-32s-r:-:*:*:*:*:*:*:*",{"vendor":44,"product":53,"version":54,"criteria":55,"vulnerable":4},"dcs-7050cx3-32s-r_firmware","4.20.11m","cpe:2.3:o:arista:dcs-7050cx3-32s-r_firmware:4.20.11m:*:*:*:*:*:*:*",{"vendor":44,"product":57,"version":50,"criteria":58,"vulnerable":4},"dcs-7050cx3-32s-r","cpe:2.3:h:arista:dcs-7050cx3-32s-r:-:*:*:*:*:*:*:*",{"vendor":44,"product":60,"version":61,"criteria":62,"vulnerable":4},"dcs-7280sram-48c6-r_firmware","4.22.0.1f","cpe:2.3:o:arista:dcs-7280sram-48c6-r_firmware:4.22.0.1f:*:*:*:*:*:*:*",{"vendor":44,"product":64,"version":50,"criteria":65,"vulnerable":4},"dcs-7280sram-48c6-r","cpe:2.3:h:arista:dcs-7280sram-48c6-r:-:*:*:*:*:*:*:*",6,[68,72,76,81],{"url":69,"source":70,"tags":71},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F158119\u002FArista-Restricted-Shell-Escape-Privilege-Escalation.html","Packetstormsecurity",[],{"url":73,"source":74,"tags":75},"https:\u002F\u002Feos.arista.com\u002Farista-eos-is-not-vulnerable-to-cve-2020-9015\u002F","Arista",[],{"url":77,"source":78,"tags":79},"https:\u002F\u002Fsecuritybytes.me","Securitybytes",[80],"Third Party Advisory",{"url":82,"source":78,"tags":83},"https:\u002F\u002Fsecuritybytes.me\u002Fposts\u002Fcve-2020-9015\u002F",[84],"Broken Link",4,[87],{"id":88,"name":88,"description":89},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":94,"metaDescription":95,"keywords":96,"canonicalUrl":97,"structuredData":98},"What is CVE-2020-9015? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-9015, a critical severity cyber security vulnerability from 2020. Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20....","CVE-2020-9015, CVE-2020-9015 vulnerability, CVE-2020-9015 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, arista security, dcs-7050qx-32s-r_firmware vulnerability, dcs-7050qx-32s-r vulnerability, dcs-7050cx3-32s-r_firmware vulnerability, dcs-7050cx3-32s-r vulnerability, dcs-7280sram-48c6-r_firmware vulnerability","\u002Fwhat-is\u002Fcve-2020-9015",{"@context":99,"@type":100,"headline":94,"description":95,"datePublished":10,"dateModified":11,"author":101,"publisher":105,"about":109,"mainEntityOfPage":113,"articleSection":116,"keywords":117},"https:\u002F\u002Fschema.org","TechArticle",{"@type":102,"name":103,"url":104},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":102,"name":103,"url":104,"logo":106},{"@type":107,"url":108},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":110,"name":6,"description":111,"additionalType":112},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":114,"@id":115},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-9015","Cybersecurity","CVE-2020-9015, CVE-2020-9015 vulnerability, CVE-2020-9015 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[119,131,141],{"Operator":120,"Negate":27,"Nodes":121},"AND",[122,127],{"Operator":123,"Negate":27,"CPEMatch":124},"OR",[125],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":126,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FFBADFE5-A368-4CA9-AD72-400DFBF381AF",{"Operator":123,"Negate":27,"CPEMatch":128},[129],{"Vulnerable":27,"Criteria":51,"MatchCriteriaID":130,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"0630F568-230E-4067-B80E-4280CA371B35",{"Operator":120,"Negate":27,"Nodes":132},[133,137],{"Operator":123,"Negate":27,"CPEMatch":134},[135],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":136,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F7F04E8A-9FA0-4199-8F62-291EC835B154",{"Operator":123,"Negate":27,"CPEMatch":138},[139],{"Vulnerable":27,"Criteria":58,"MatchCriteriaID":140,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E6F270D9-1B05-4CBC-BEE0-0850C94BB9F0",{"Operator":120,"Negate":27,"Nodes":142},[143,147],{"Operator":123,"Negate":27,"CPEMatch":144},[145],{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":146,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"09B0C068-0FBB-48BA-B5F4-A427D40CF110",{"Operator":123,"Negate":27,"CPEMatch":148},[149],{"Vulnerable":27,"Criteria":65,"MatchCriteriaID":150,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4592091C-AD4A-4904-9EFF-C85AABFD7CDE",[],[153,160],{"id":154,"eventType":155,"eventTime":156,"details":157,"label":158,"color":159},"b8640423-6ce6-4b64-9b80-c824abfd9619","LOW_EPSS_DELTA","2025-11-19T04:06:11.701179+00:00","Daily EPSS score decreased by 0.157 on 2023-12-30","EPSS Score Decreased","green",{"id":161,"eventType":162,"eventTime":163,"details":164,"label":165,"color":166},"3fd277cb-ae2b-4599-8106-e175634ae51c","HIGH_EPSS_DELTA","2025-11-22T04:05:59.072771+00:00","Daily EPSS score increased by 0.157 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":168,"version":33},1792338701738,{"score":170,"band":171,"action":172,"scoredAt":173},56,"Medium","Plan remediation","2026-10-16T06:47:58.527528+00:00"]