CVE-2023-24509

On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login to the standby supervisor as a root user, leading to a privilege escalation. Valid user credentials are required in order to exploit this vulnerability.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.arista.com/en/support/advisories-notices/security-advisory/16985-security-advisory-0082	Exploit Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:arista:eos::::::::
	cpe:2.3:o:arista:eos::::::::
	cpe:2.3:o:arista:eos::::::::
	cpe:2.3:o:arista:eos::::::::
	cpe:2.3:o:arista:eos::::::::
	cpe:2.3:o:arista:eos::::::::

OR	cpe:2.3:h:arista:704x3:-:::::::*
	cpe:2.3:h:arista:7304x:-:::::::*
	cpe:2.3:h:arista:7304x3:-:::::::*
	cpe:2.3:h:arista:7308x:-:::::::*
	cpe:2.3:h:arista:7316x:-:::::::*
	cpe:2.3:h:arista:7324x:-:::::::*
	cpe:2.3:h:arista:7328x:-:::::::*
	cpe:2.3:h:arista:7504r:-:::::::*
	cpe:2.3:h:arista:7504r3:-:::::::*
	cpe:2.3:h:arista:7508r:-:::::::*
	cpe:2.3:h:arista:7508r3:-:::::::*
	cpe:2.3:h:arista:7512r:-:::::::*
	cpe:2.3:h:arista:7512r3:-:::::::*
	cpe:2.3:h:arista:7516r:-:::::::*
	cpe:2.3:h:arista:755x:-:::::::*
	cpe:2.3:h:arista:758x:-:::::::*
	cpe:2.3:h:arista:7804r3:-:::::::*
	cpe:2.3:h:arista:7808r3:-:::::::*
	cpe:2.3:h:arista:7812r3:-:::::::*
	cpe:2.3:h:arista:7816r3:-:::::::*

History

No history.

Information

Published : 2023-04-13 20:15

Updated : 2024-02-28 20:13

NVD link : CVE-2023-24509

Mitre link : CVE-2023-24509

CVE.ORG link : CVE-2023-24509

JSON object : View

Products Affected

arista

7304x3
7808r3
7304x
7516r
7508r
7512r3
7328x
7308x
755x
7508r3
7504r
7512r
7316x
704x3
eos
7816r3
7504r3
758x
7324x
7812r3
7804r3

CWE

NVD-CWE-noinfo CWE-269

Improper Privilege Management

{"id": "CVE-2023-24509", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}, {"type": "Secondary", "source": "psirt@arista.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.3, "attackVector": "LOCAL", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.5}]}, "published": "2023-04-13T20:15:08.843", "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/16985-security-advisory-0082", "tags": ["Exploit", "Mitigation", "Vendor Advisory"], "source": "psirt@arista.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "psirt@arista.com", "description": [{"lang": "en", "value": "CWE-269"}]}], "descriptions": [{"lang": "en", "value": "On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login to the standby supervisor as a root user, leading to a privilege escalation. Valid user credentials are required in order to exploit this vulnerability."}], "lastModified": "2023-04-25T14:19:44.713", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "498704F8-24D4-48C9-A5CB-4A8F7054AA49", "versionEndIncluding": "4.23.13m", "versionStartIncluding": "4.23"}, {"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8923F137-B1BA-49FF-A100-AD357966EE4F", "versionEndExcluding": "4.24.11m", "versionStartIncluding": "4.24.0"}, {"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D6EA8CE-BAA4-4B4D-8A9F-A65018FC6B3A", "versionEndExcluding": "4.25.10m", "versionStartIncluding": "4.25.0"}, {"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "659190E5-DFB0-4172-BD6F-1B9E22533CE5", "versionEndExcluding": "4.26.9m", "versionStartIncluding": "4.26.0"}, {"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "20966F67-1C70-458C-A4EF-02612345DE48", "versionEndExcluding": "4.27.7m", "versionStartIncluding": "4.27.0"}, {"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F57FAA3-518C-498C-9580-19A207C8F176", "versionEndExcluding": "4.28.4m", "versionStartIncluding": "4.28.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:arista:704x3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D7C0C33F-72A7-41CA-A666-1CEC9F0FE02F"}, {"criteria": "cpe:2.3:h:arista:7304x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "65C6E0C9-7F81-4CE3-BD46-7939667E5969"}, {"criteria": "cpe:2.3:h:arista:7304x3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "78FE473B-CA6E-4E8D-8DBF-676B1ECBB185"}, {"criteria": "cpe:2.3:h:arista:7308x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B7A8ABF1-ADF4-474D-B01B-8BB271E1263E"}, {"criteria": "cpe:2.3:h:arista:7316x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "73ECE6D6-12E5-4396-9C19-3B2E08E13147"}, {"criteria": "cpe:2.3:h:arista:7324x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B8862F74-E399-41EE-A081-62D99A7C1755"}, {"criteria": "cpe:2.3:h:arista:7328x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8F16261D-639F-4CAB-BDA6-EF3F277E663C"}, {"criteria": "cpe:2.3:h:arista:7504r:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CD1F369D-93BF-4259-99F5-97FBEF79BBA5"}, {"criteria": "cpe:2.3:h:arista:7504r3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8387CCEA-F00C-4F1F-B966-ACF8B16F1D22"}, {"criteria": "cpe:2.3:h:arista:7508r:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F35978B6-889C-47DB-971B-B2A12FF537E0"}, {"criteria": "cpe:2.3:h:arista:7508r3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "55AE2A1C-A4FD-423B-A77E-2E24C2310A6A"}, {"criteria": "cpe:2.3:h:arista:7512r:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2360E039-5F12-4210-8578-7EBDA4575A6E"}, {"criteria": "cpe:2.3:h:arista:7512r3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C4B0D708-B426-4CA1-BE87-08BD14B7EACE"}, {"criteria": "cpe:2.3:h:arista:7516r:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3D45E5E5-7EB9-41E7-8EEE-570E6646EDDD"}, {"criteria": "cpe:2.3:h:arista:755x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "585E3617-2B1F-4E58-853A-0E9703B91B80"}, {"criteria": "cpe:2.3:h:arista:758x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "13B1D90C-73CC-49A2-B202-B07D96226729"}, {"criteria": "cpe:2.3:h:arista:7804r3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A54F3D32-5A07-4791-90BF-96BD8A24C2F6"}, {"criteria": "cpe:2.3:h:arista:7808r3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2F078B04-2DA0-4A4B-BB1A-408DC14CB61F"}, {"criteria": "cpe:2.3:h:arista:7812r3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E9B99200-EC76-404E-9900-5D1DC3B9A758"}, {"criteria": "cpe:2.3:h:arista:7816r3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5A172A49-1A0E-464B-BDDD-A8F52856D595"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@arista.com"}