by Kastro
Paper/Archive/CVE-2023-24509

CVE-2023-24509

Arista Networks Arista EOS — On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login to the standby supervisor as a root user, leading t ...

EPSS 0.2%CVSS 9.3
critical.is priorityof 100
31
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 14.9.149 × 203.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login to the standby supervisor as a root user, leading to a privilege escalation. Valid user credentials are required in order to exploit this vulnerability.

Affected

ProductAffectedFixed inSource
Arista EOS4.23.0 4.23.13M–CNA
Arista EOS4.28.0 – 4.28.3M–CNA
Arista EOS4.27.0 – 4.27.6M–CNA
Arista EOS4.286.0 – 4.26.8M–CNA
Arista EOS4.25.0 – 4.25.9M–CNA
Arista EOS4.24.0 – 4.24.10M–CNA

Scores by source

Arista (CNA)9.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refarista.com/en/support/advisories-notices/security-advisory/16985-security-advisory-0082