Skip to content
OpenAdvisories
High WID-SEC-2023-1075 1 CVE

Arista EOS: Schwachstelle ermöglicht Manipulation von Dateien

Published Apr 25, 2023 · Updated Apr 25, 2023 · de-DE

Vendor: Arista Networks Product: EOS Product: EOS < 4.26.10M Product: EOS < 4.27.9M Product: EOS < 4.28.6M Product: EOS < 4.29.2F

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Arista EOS ausnutzen, um Dateien zu manipulieren.

Product

Arista Extensible Operating System (EOS) ist ein modulares Linux basiertes Netzwerkbetriebssystem.

Vulnerabilities 1

  • High 8.8
    CVE-2023-24512

    On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch.

    On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent (refer…

    Arista Networks Terminattr Network devices

Revision history

  1. #1

    Initiale Fassung

References