On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login to the standby supervisor as a root user, leading to a privilege escalation. Valid user credentials are required in order to exploit this vulnerability.
References
| Link | Resource |
|---|---|
| https://www.arista.com/en/support/advisories-notices/security-advisory/16985-security-advisory-0082 | Exploit Mitigation Vendor Advisory |
| https://www.arista.com/en/support/advisories-notices/security-advisory/16985-security-advisory-0082 | Exploit Mitigation Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 07:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.arista.com/en/support/advisories-notices/security-advisory/16985-security-advisory-0082 - Exploit, Mitigation, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.3 |
Information
Published : 2023-04-13 20:15
Updated : 2024-11-21 07:48
NVD link : CVE-2023-24509
Mitre link : CVE-2023-24509
CVE.ORG link : CVE-2023-24509
JSON object : View
Products Affected
arista
- 7304x3
- 7304x
- 7504r3
- 7508r
- 7512r
- eos
- 7316x
- 758x
- 7324x
- 7328x
- 7504r
- 7816r3
- 7308x
- 704x3
- 7812r3
- 7808r3
- 7508r3
- 755x
- 7804r3
- 7512r3
- 7516r
CWE