← Back

CVE-2023-24547

nvd nist
Published: Dec 6, 2023Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

On affected platforms running Arista MOS, the configuration of a BGP password will cause the password to be logged in clear text that can be revealed in local logs or remote logging servers by authenticated users, as well as appear in clear text in the device’s running config.

Affected (1)

Products: Arista: Mos
Arista
1 product
Mos
Configuration A
1 vulnerable · 4 platform
Vulnerable SoftwareAffected Versions
Mos
From 0.13.0 to 0.39.4
Running on/withPlatform Versions
Arista
7130
All versions
Arista
7130 16g3s
All versions
Arista
7130 48g3s
All versions
Arista
7130 96s
All versions

Related CWEs

CWE-319
Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References (2)

Source: psirt@arista.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.