On affected platforms running Arista MOS, the configuration of a BGP password will cause the password to be logged in clear text that can be revealed in local logs or remote logging servers by authenticated users, as well as appear in clear text in the device’s running config.
References
| Link | Resource |
|---|---|
| https://www.arista.com/en/support/advisories-notices/security-advisory/18644-security-advisory-0090 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
11 Dec 2023, 19:53
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-319 | |
| References | () https://www.arista.com/en/support/advisories-notices/security-advisory/18644-security-advisory-0090 - Vendor Advisory | |
| CPE | cpe:2.3:h:arista:7130-96s:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7130:-:*:*:*:*:*:*:* cpe:2.3:o:arista:mos:*:*:*:*:*:*:*:* cpe:2.3:h:arista:7130-16g3s:-:*:*:*:*:*:*:* cpe:2.3:h:arista:7130-48g3s:-:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| First Time |
Arista
Arista 7130 Arista 7130-16g3s Arista 7130-48g3s Arista mos Arista 7130-96s |
06 Dec 2023, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-06 00:15
Updated : 2023-12-11 19:53
NVD link : CVE-2023-24547
Mitre link : CVE-2023-24547
JSON object : View
Products Affected
arista
- 7130-16g3s
- 7130-48g3s
- 7130-96s
- mos
- 7130
CWE
CWE-319
Cleartext Transmission of Sensitive Information