CVE-2023-24512

Exploit

EPSS 0.09%
Published 25.04.2023 21:15:10
Last modified 21.11.2024 07:48:01
Source psirt@arista.com
Teams watchlist Login
Open Login

On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent (referred to as the TerminAttr agent) is enabled and gNMI access is configured on the agent. Note: This gNMI over the Streaming Telemetry Agent scenario is mostly commonly used when streaming to a 3rd party system and is not used by default when streaming to CloudVision

Affected products Warnungen 0 Metrics 3 CWE 2 References 4

Data is provided by the National Vulnerability Database (NVD)

Arista ≫ Eos Version >= 4.26.0 < 4.26.10m

   Arista ≫ 32qd Version-
   Arista ≫ 48ehs Version-
   Arista ≫ 48lbas Version-
   Arista ≫ 48lbs Version-
   Arista ≫ 48s6qd Version-
   Arista ≫ 7010t-48 Version-
   Arista ≫ 7020sr-24c2 Version-
   Arista ≫ 7020sr-32c2 Version-
   Arista ≫ 7020tr-48 Version-
   Arista ≫ 7020tra-48 Version-
   Arista ≫ 7050cx3-32s Version-
   Arista ≫ 7050cx3m-32s Version-
   Arista ≫ 7050qx-32s Version-
   Arista ≫ 7050qx2-32s Version-
   Arista ≫ 7050sx-128 Version-
   Arista ≫ 7050sx-64 Version-
   Arista ≫ 7050sx-72q Version-
   Arista ≫ 7050sx2-128 Version-
   Arista ≫ 7050sx2-72q Version-
   Arista ≫ 7050sx3-48c8 Version-
   Arista ≫ 7050sx3-48yc Version-
   Arista ≫ 7050sx3-48yc12 Version-
   Arista ≫ 7050sx3-48yc8 Version-
   Arista ≫ 7050sx3-96yc8 Version-
   Arista ≫ 7050tx-48 Version-
   Arista ≫ 7050tx-64 Version-
   Arista ≫ 7050tx-72q Version-
   Arista ≫ 7050tx2-128 Version-
   Arista ≫ 7050tx3-48c8 Version-
   Arista ≫ 7060cx-32s Version-
   Arista ≫ 7060cx2-32s Version-
   Arista ≫ 7060dx4-32 Version-
   Arista ≫ 7060px4-32 Version-
   Arista ≫ 7060sx2-48yc6 Version-
   Arista ≫ 7130-16g3s Version-
   Arista ≫ 7130-48g3s Version-
   Arista ≫ 7130-96s Version-
   Arista ≫ 7150s-24 Version-
   Arista ≫ 7150s-52 Version-
   Arista ≫ 7150s-64 Version-
   Arista ≫ 7150sc-24 Version-
   Arista ≫ 7150sc-64 Version-
   Arista ≫ 7160-32cq Version-
   Arista ≫ 7160-48tc6 Version-
   Arista ≫ 7160-48yc6 Version-
   Arista ≫ 7170-32c Version-
   Arista ≫ 7170-32cd Version-
   Arista ≫ 7170-64c Version-
   Arista ≫ 7170b-64c Version-
   Arista ≫ 720df-48y Version-
   Arista ≫ 720dp-24s Version-
   Arista ≫ 720dp-48s Version-
   Arista ≫ 720dt-24s Version-
   Arista ≫ 720dt-48s Version-
   Arista ≫ 720xp-24y6 Version-
   Arista ≫ 720xp-24zy4 Version-
   Arista ≫ 720xp-48y6 Version-
   Arista ≫ 720xp-48zc2 Version-
   Arista ≫ 720xp-96zc2 Version-
   Arista ≫ 7250qx-64 Version-
   Arista ≫ 7260cx Version-
   Arista ≫ 7260cx3 Version-
   Arista ≫ 7260qx Version-
   Arista ≫ 7260sx2 Version-
   Arista ≫ 7280cr2k-60 Version-
   Arista ≫ 7280cr3-32d4 Version-
   Arista ≫ 7280cr3-32p4 Version-
   Arista ≫ 7280cr3-96 Version-
   Arista ≫ 7280cr3k-32d4 Version-
   Arista ≫ 7280cr3k-32p4 Version-
   Arista ≫ 7280cr3k-96 Version-
   Arista ≫ 7280dr3-24 Version-
   Arista ≫ 7280dr3k-24 Version-
   Arista ≫ 7280e Version-
   Arista ≫ 7280pr3-24 Version-
   Arista ≫ 7280pr3k-24 Version-
   Arista ≫ 7280sr3-48yc8 Version-
   Arista ≫ 7280sr3k-48yc8 Version-
   Arista ≫ 7300x-32q Version-
   Arista ≫ 7300x-64s Version-
   Arista ≫ 7300x-64t Version-
   Arista ≫ 7300x3-32c Version-
   Arista ≫ 7300x3-48yc4 Version-
   Arista ≫ 7320x-32c Version-
   Arista ≫ 7358x4 Version-
   Arista ≫ 7368x4 Version-
   Arista ≫ 7388x5 Version-
   Arista ≫ 7500r3-24d Version-
   Arista ≫ 7500r3-24p Version-
   Arista ≫ 7500r3-36cq Version-
   Arista ≫ 7500r3k-36cq Version-
   Arista ≫ 7804r3 Version-
   Arista ≫ 7808r3 Version-
   Arista ≫ 7812r3 Version-
   Arista ≫ 7816r3 Version-
   Arista ≫ 96lbs Version-
   Arista ≫ Dcs-7010tx-48 Version-
   Arista ≫ Dcs-7500-12cq-lc Version-
   Arista ≫ Dcs-7500e-12cm-lc Version-
   Arista ≫ Dcs-7500e-36q-lc Version-
   Arista ≫ Dcs-7500e-48s-lc Version-
   Arista ≫ Dcs-7500e-6c2-lc Version-
   Arista ≫ Dcs-7500e-72s-lc Version-
   Arista ≫ Dcs-7500r-36cq-lc Version-
   Arista ≫ Dcs-7500r-36q-lc Version-
   Arista ≫ Dcs-7500r-48s2cq-lc Version-

Arista ≫ Eos Version >= 4.27.0 < 4.27.9m

Arista ≫ Eos Version >= 4.28.0 < 4.28.6m

Arista ≫ Eos Version >= 4.29.0 < 4.29.2f

Arista ≫ Ceos-lab

Arista ≫ Cloudeos Version-

Arista ≫ Veos-lab Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.09%	0.263

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
psirt@arista.com	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

https://www.arista.com/en/support/advisories-notices/security-advisory/17250-security-advisory-0086

Vendor Advisory

Exploit

Mitigation

https://nvd.nist.gov/vuln/detail/CVE-2023-24512

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-24512

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-24512

EUVD