Strix
26.1K

CVE-2023-24512

MEDIUMCVSS 6.5/10EPSS 0.60%

Last modified

CVE-2023-24512 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent (referred to as the TerminAttr agent) is enabled and gNMI access is configured on the agent. EPSS estimates a 0.60% chance of exploitation in the next 30 days.

Description

On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent (referred to as the TerminAttr agent) is enabled and gNMI access is configured on the agent. Note: This gNMI over the Streaming Telemetry Agent scenario is mostly commonly used when streaming to a 3rd party system and is not used by default when streaming to CloudVision

Metrics

CVSS 3.1
6.5/10

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS Probability
0.60%

44.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
AristaEos>= 4.26.0, < 4.26.10m
AristaEos>= 4.27.0, < 4.27.9m
AristaEos>= 4.28.0, < 4.28.6m
AristaEos>= 4.29.0, < 4.29.2f
AristaCeos-LabAll versions
AristaCloudeosAll versions
AristaVeos-LabAll versions

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2023-24512?
On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent (referred to as the TerminAttr agent) is enabled and gNMI access is configured on the agent. Note: This gNMI over the Streaming Telemetry Agent scenario is mostly commonly used when streaming to a 3rd party system and is not used by default when streaming to CloudVision
How severe is CVE-2023-24512?
CVE-2023-24512 has a CVSS score of 6.5/10 (MEDIUM severity). The EPSS model estimates a 0.60% probability of exploitation in the next 30 days.
How do I fix CVE-2023-24512?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2023-24512?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST