CVE-2016-9012: CloudVision Portal (CVP) before 2016.1.2.1 allows remote authenticated users to gain access to the internal...

Security readout for executives and security teams

This issue affects Arista CloudVision Portal before 2016.1.2.1. An authenticated remote user could reach internal configuration mechanisms through the management plane. The business concern is unauthorized access to sensitive network-management configuration paths, but the source bundle does not provide severity scoring or confirmed exploitation. Exposure is most likely where Arista CloudVision Portal before 2016.1.2.1 remains deployed and reachable by authenticated users on the management plane. Public internet exposure is not stated in the sources. Treat this as a targeted network-management exposure issue. Prioritize environments where older CVP systems manage important infrastructure or have broad authenticated user access. Urgency is lower than unauthenticated or known-exploited flaws, but remediation should not be deferred indefinitely. Mitigation focus: Identify all CloudVision Portal instances and installed versions.; Upgrade affected CVP systems to 2016.1.2.1 or later per Arista guidance.; Restrict CVP management-plane access to trusted administrative networks..

Prepared

Jun 13, 2026, 12:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.