An0@Deadnull

**Name of the Vulnerable Software and Affected Versions** Arista DCS-7050QX-32S-R version 4.20.9M Arista DCS-7050CX3-32S-R version 4.20.11M Arista DCS-7280SRAM-48C6-R version 4.22.0.1F **Description** The issue allows attackers to bypass intended TACACS+ shell restrictions via a `|` character. This is reportedly a configuration issue relating to an overly permissive regular expression in the TACACS+ server permitted commands. **Recommendations** For Arista DCS-7050QX-32S-R version 4.20.9M, consider revising the TACACS+ server configuration to restrict permitted commands and avoid using overly permissive regular expressions. For Arista DCS-7050CX3-32S-R version 4.20.11M, consider revising the TACACS+ server configuration to restrict permitted commands and avoid using overly permissive regular expressions. For Arista DCS-7280SRAM-48C6-R version 4.22.0.1F, consider revising the TACACS+ server configuration to restrict permitted commands and avoid using overly permissive regular expressions.