Skip to content
OpenAdvisories
High WID-SEC-2023-0379 1 CVE

Arista EOS: Schwachstelle ermöglicht Privilegieneskalation

Published Feb 14, 2023 · Updated Feb 14, 2023 · de-DE

Vendor: Arista Networks Product: EOS Product: EOS < 4.24.11 Product: EOS < 4.25.10 Product: EOS < 4.26.9 Product: EOS < 4.27.7 Product: EOS < 4.28.4 Product: EOS < 4.29.0

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Arista EOS ausnutzen, um seine Privilegien zu erhöhen.

Product

Arista Extensible Operating System (EOS) ist ein modulares Linux basiertes Netzwerkbetriebssystem.

Vulnerabilities 1

  • Critical 9.3
    CVE-2023-24509

    On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login to the standby supervisor as a root user, leading t ...

    On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login to the standby supervisor as a root user, leading to a priv…

    Arista Networks Arista EOS Network devices

Revision history

  1. #1

    Initiale Fassung

References