Auth bypass in Arista 32qd
CVE-2023-24512
On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent (referred to as the TerminAttr agent) is enabled and gNMI access is configured on the agent. Note: This gNMI over the Streaming Telemetry Agent scenario is mostly commonly used when streaming to a 3rd party system and is not used by default when streaming to CloudVision
EPSS: 0.006 (46.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
Weakness classification (CWE)
References
- psirt@arista.com (Exploit, Mitigation, Vendor Advisory)
Frequently asked questions
- What is CVE-2023-24512?
- CVE-2023-24512 is a high-severity vulnerability in Arista 32qd, classified under Improper Access Control. CVSS score: 8.8/10. Published 2023-04-25.
- How severe is CVE-2023-24512?
- High severity. CVSS v3 base score is 8.8 out of 10.