CVE-2024-11186: Arista Networks Cloudvision Portal

Critical severity, CVSS 10.0. EPSS: 0.8% chance of exploitation in the next 30 days.

On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts the Arista CloudVision Portal products when run on-premise. It does not impact CloudVision as-a-Service.

Affected products

• Arista Networks Cloudvision Portal: version 2024.3.0 only; from 2024.2.0, up to and including 2024.2.1; from 2024.1.0, up to and including 2024.1.2; version 2023.3 only; version 2023.2 only; version 2023.1 only; …

Published 2025-05-08. Last modified 2026-06-17.