On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent (referred to as the TerminAttr agent) is enabled and gNMI access is configured on the agent. Note: This gNMI over the Streaming Telemetry Agent scenario is mostly commonly used when streaming to a 3rd party system and is not used by default when streaming to CloudVision
References
Link | Resource |
---|---|
https://www.arista.com/en/support/advisories-notices/security-advisory/17250-security-advisory-0086 | Exploit Mitigation Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
|
History
09 May 2023, 16:02
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://www.arista.com/en/support/advisories-notices/security-advisory/17250-security-advisory-0086 - Exploit, Mitigation, Vendor Advisory | |
CPE | cpe:2.3:h:arista:7804r3:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7060px4-32:-:*:*:*:*:*:*:* cpe:2.3:h:arista:dcs-7500r-48s2cq-lc:-:*:*:*:*:*:*:* cpe:2.3:h:arista:48ehs:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7050sx-64:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7060sx2-48yc6:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7060cx2-32s:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7130-16g3s:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7050sx-128:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7050sx2-72q:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7260qx:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7500r3-24d:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7300x-64t:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7280pr3k-24:-:*:*:*:*:*:*:* cpe:2.3:a:arista:veos-lab:-:*:*:*:*:*:*:* cpe:2.3:h:arista:48s6qd:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7280cr3-32d4:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7150sc-24:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7280pr3-24:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7010t-48:-:*:*:*:*:*:*:* cpe:2.3:h:arista:48lbas:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7050tx-72q:-:*:*:*:*:*:*:* cpe:2.3:h:arista:720xp-48y6:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7170-32cd:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7020sr-24c2:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7050qx-32s:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7260sx2:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7280sr3k-48yc8:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7050tx-64:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7170-32c:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7060cx-32s:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7150s-52:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7260cx:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7300x-64s:-:*:*:*:*:*:*:* cpe:2.3:h:arista:dcs-7500r-36cq-lc:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7280dr3-24:-:*:*:*:*:*:*:* cpe:2.3:h:arista:720df-48y:-:*:*:*:*:*:*:* cpe:2.3:h:arista:720xp-48zc2:-:*:*:*:*:*:*:* cpe:2.3:h:arista:720dp-48s:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7050tx3-48c8:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7050qx2-32s:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7050sx2-128:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7150sc-64:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7160-48yc6:-:*:*:*:*:*:*:* cpe:2.3:h:arista:32qd:-:*:*:*:*:*:*:* cpe:2.3:h:arista:96lbs:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7280cr3-32p4:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7020sr-32c2:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7280cr3k-96:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7020tr-48:-:*:*:*:*:*:*:* cpe:2.3:h:arista:dcs-7500e-36q-lc:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7060dx4-32:-:*:*:*:*:*:*:* cpe:2.3:h:arista:720dp-24s:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7280cr3k-32p4:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7050cx3m-32s:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7160-48tc6:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7300x3-32c:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7300x3-48yc4:-:*:*:*:*:*:*:* cpe:2.3:h:arista:dcs-7500e-12cm-lc:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7808r3:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7280e:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7160-32cq:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7320x-32c:-:*:*:*:*:*:*:* cpe:2.3:h:arista:720xp-24y6:-:*:*:*:*:*:*:* cpe:2.3:a:arista:ceos-lab:*:*:*:*:*:*:*:* cpe:2.3:h:arista:7050sx3-48yc8:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7150s-64:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7050sx3-48yc12:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7170-64c:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7260cx3:-:*:*:*:*:*:*:* cpe:2.3:h:arista:720xp-96zc2:-:*:*:*:*:*:*:* cpe:2.3:h:arista:720xp-24zy4:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7280dr3k-24:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7050sx3-48c8:-:*:*:*:*:*:*:* cpe:2.3:h:arista:dcs-7010tx-48:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7280cr2k-60:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7280cr3k-32d4:-:*:*:*:*:*:*:* cpe:2.3:h:arista:dcs-7500e-6c2-lc:-:*:*:*:*:*:*:* cpe:2.3:h:arista:720dt-24s:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7130-96s:-:*:*:*:*:*:*:* cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:* cpe:2.3:h:arista:48lbs:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7250qx-64:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7050sx3-96yc8:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7280cr3-96:-:*:*:*:*:*:*:* cpe:2.3:h:arista:dcs-7500e-48s-lc:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7050tx2-128:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7050sx-72q:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7280sr3-48yc8:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7050tx-48:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7388x5:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7816r3:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7500r3-36cq:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7368x4:-:*:*:*:*:*:*:* cpe:2.3:h:arista:720dt-48s:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7170b-64c:-:*:*:*:*:*:*:* cpe:2.3:h:arista:dcs-7500e-72s-lc:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7300x-32q:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7358x4:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7812r3:-:*:*:*:*:*:*:* cpe:2.3:a:arista:cloudeos:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7150s-24:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7500r3k-36cq:-:*:*:*:*:*:*:* cpe:2.3:h:arista:dcs-7500-12cq-lc:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7050cx3-32s:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7050sx3-48yc:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7130-48g3s:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7020tra-48:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7500r3-24p:-:*:*:*:*:*:*:* cpe:2.3:h:arista:dcs-7500r-36q-lc:-:*:*:*:*:*:*:* |
|
CWE | CWE-863 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
25 Apr 2023, 21:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-04-25 21:15
Updated : 2024-02-04 23:37
NVD link : CVE-2023-24512
Mitre link : CVE-2023-24512
CVE.ORG link : CVE-2023-24512
JSON object : View
Products Affected
arista
- 7050sx-72q
- 7280dr3-24
- dcs-7500r-48s2cq-lc
- 7320x-32c
- 7170-32c
- 7020tra-48
- 7150s-24
- 720xp-24y6
- 32qd
- 7170-64c
- 720dt-24s
- 7280pr3-24
- 48lbas
- 7368x4
- 7010t-48
- 7050sx2-72q
- 720dp-24s
- dcs-7500e-48s-lc
- 7280dr3k-24
- 7170-32cd
- cloudeos
- 48s6qd
- dcs-7500e-36q-lc
- 7260cx3
- 7260cx
- 7060cx-32s
- 7020sr-32c2
- 7280e
- eos
- 720dt-48s
- 7150s-64
- 7130-96s
- 7160-48yc6
- 48ehs
- 7130-16g3s
- 7050sx-64
- 7300x-64t
- 7500r3-24d
- 7500r3k-36cq
- 7050cx3-32s
- 7060sx2-48yc6
- 7812r3
- 7160-48tc6
- 7280cr3-96
- 720xp-48y6
- 7300x3-48yc4
- dcs-7500-12cq-lc
- 7130-48g3s
- 7280cr3-32p4
- 720xp-48zc2
- 7804r3
- ceos-lab
- 7260sx2
- 7260qx
- 7060dx4-32
- 7050tx-48
- 7280cr3k-32p4
- 7150s-52
- dcs-7500e-12cm-lc
- 7300x-64s
- 720df-48y
- 7150sc-24
- 7388x5
- 7050tx-64
- 7280cr2k-60
- 7280pr3k-24
- 7050sx-128
- 7060cx2-32s
- 7160-32cq
- 7050tx2-128
- 7280cr3k-96
- 7300x3-32c
- 7816r3
- 720xp-24zy4
- 7050sx3-48yc12
- 720dp-48s
- 7280sr3-48yc8
- 7170b-64c
- 7280sr3k-48yc8
- dcs-7500r-36cq-lc
- dcs-7010tx-48
- 7280cr3k-32d4
- 7020sr-24c2
- 7050tx3-48c8
- 7060px4-32
- 96lbs
- 7358x4
- 7020tr-48
- 7150sc-64
- 7500r3-36cq
- dcs-7500e-6c2-lc
- 7250qx-64
- 7050sx3-48yc
- dcs-7500r-36q-lc
- 7050qx2-32s
- 720xp-96zc2
- 7050sx3-48yc8
- 7050sx3-96yc8
- 7050tx-72q
- 7050sx2-128
- 7300x-32q
- veos-lab
- 48lbs
- 7050sx3-48c8
- 7280cr3-32d4
- dcs-7500e-72s-lc
- 7050cx3m-32s
- 7808r3
- 7500r3-24p
- 7050qx-32s