CVE-2023-24512
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD
Description
On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent (referred to as the TerminAttr agent) is enabled and gNMI access is configured on the agent. Note: This gNMI over the Streaming Telemetry Agent scenario is mostly commonly used when streaming to a 3rd party system and is not used by default when streaming to CloudVision
Affected (7)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 4.26.0 to 4.26.10m |
| Running on/with | Platform Versions |
|---|---|
Arista 32qd | All versions |
Arista 48ehs | All versions |
Arista 48lbas | All versions |
Arista 48lbs | All versions |
Arista 48s6qd | All versions |
Arista 7010t 48 | All versions |
Arista 7020sr 24c2 | All versions |
Arista 7020sr 32c2 | All versions |
Arista 7020tr 48 | All versions |
Arista 7020tra 48 | All versions |
Arista 7050cx3 32s | All versions |
Arista 7050cx3m 32s | All versions |
Arista 7050qx 32s | All versions |
Arista 7050qx2 32s | All versions |
Arista 7050sx 128 | All versions |
Arista 7050sx 64 | All versions |
Arista 7050sx 72q | All versions |
Arista 7050sx2 128 | All versions |
Arista 7050sx2 72q | All versions |
Arista 7050sx3 48c8 | All versions |
Arista 7050sx3 48yc | All versions |
Arista 7050sx3 48yc12 | All versions |
Arista 7050sx3 48yc8 | All versions |
Arista 7050sx3 96yc8 | All versions |
Arista 7050tx 48 | All versions |
Arista 7050tx 64 | All versions |
Arista 7050tx 72q | All versions |
Arista 7050tx2 128 | All versions |
Arista 7050tx3 48c8 | All versions |
Arista 7060cx 32s | All versions |
Arista 7060cx2 32s | All versions |
Arista 7060dx4 32 | All versions |
Arista 7060px4 32 | All versions |
Arista 7060sx2 48yc6 | All versions |
Arista 7130 16g3s | All versions |
Arista 7130 48g3s | All versions |
Arista 7130 96s | All versions |
Arista 7150s 24 | All versions |
Arista 7150s 52 | All versions |
Arista 7150s 64 | All versions |
Arista 7150sc 24 | All versions |
Arista 7150sc 64 | All versions |
Arista 7160 32cq | All versions |
Arista 7160 48tc6 | All versions |
Arista 7160 48yc6 | All versions |
Arista 7170 32c | All versions |
Arista 7170 32cd | All versions |
Arista 7170 64c | All versions |
Arista 7170b 64c | All versions |
Arista 720df 48y | All versions |
Arista 720dp 24s | All versions |
Arista 720dp 48s | All versions |
Arista 720dt 24s | All versions |
Arista 720dt 48s | All versions |
Arista 720xp 24y6 | All versions |
Arista 720xp 24zy4 | All versions |
Arista 720xp 48y6 | All versions |
Arista 720xp 48zc2 | All versions |
Arista 720xp 96zc2 | All versions |
Arista 7250qx 64 | All versions |
Arista 7260cx | All versions |
Arista 7260cx3 | All versions |
Arista 7260qx | All versions |
Arista 7260sx2 | All versions |
Arista 7280cr2k 60 | All versions |
Arista 7280cr3 32d4 | All versions |
Arista 7280cr3 32p4 | All versions |
Arista 7280cr3 96 | All versions |
Arista 7280cr3k 32d4 | All versions |
Arista 7280cr3k 32p4 | All versions |
Arista 7280cr3k 96 | All versions |
Arista 7280dr3 24 | All versions |
Arista 7280dr3k 24 | All versions |
Arista 7280e | All versions |
Arista 7280pr3 24 | All versions |
Arista 7280pr3k 24 | All versions |
Arista 7280sr3 48yc8 | All versions |
Arista 7280sr3k 48yc8 | All versions |
Arista 7300x 32q | All versions |
Arista 7300x 64s | All versions |
Arista 7300x 64t | All versions |
Arista 7300x3 32c | All versions |
Arista 7300x3 48yc4 | All versions |
Arista 7320x 32c | All versions |
Arista 7358x4 | All versions |
Arista 7368x4 | All versions |
Arista 7388x5 | All versions |
Arista 7500r3 24d | All versions |
Arista 7500r3 24p | All versions |
Arista 7500r3 36cq | All versions |
Arista 7500r3k 36cq | All versions |
Arista 7804r3 | All versions |
Arista 7808r3 | All versions |
Arista 7812r3 | All versions |
Arista 7816r3 | All versions |
Arista 96lbs | All versions |
Arista Dcs 7010tx 48 | All versions |
Arista Dcs 7500 12cq Lc | All versions |
Arista Dcs 7500e 12cm Lc | All versions |
Arista Dcs 7500e 36q Lc | All versions |
Arista Dcs 7500e 48s Lc | All versions |
Arista Dcs 7500e 6c2 Lc | All versions |
Arista Dcs 7500e 72s Lc | All versions |
Arista Dcs 7500r 36cq Lc | All versions |
Arista Dcs 7500r 36q Lc | All versions |
Arista Dcs 7500r 48s2cq Lc | All versions |
Related CWEs
CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-863
Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.
References (2)
Source: psirt@arista.com
ExploitMitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitMitigationVendor Advisory
Timeline
No history available yet.