On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login to the standby supervisor as a root user, leading to a privilege escalation. Valid user credentials are required in order to exploit this vulnerability.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HArista 704x3
HWAristawszystkie wersjeArista 7304x
HWAristawszystkie wersjeArista 7304x3
HWAristawszystkie wersjeArista 7308x
HWAristawszystkie wersjeArista 7316x
HWAristawszystkie wersjeArista 7324x
HWAristawszystkie wersjeArista 7328x
HWAristawszystkie wersjeArista 7504r
HWAristawszystkie wersjeArista 7504r3
HWAristawszystkie wersjeArista 7508r
HWAristawszystkie wersjeArista 7508r3
HWAristawszystkie wersjeArista 7512r
HWAristawszystkie wersjeArista 7512r3
HWAristawszystkie wersjeArista 7516r
HWAristawszystkie wersjeArista 755x
HWAristawszystkie wersjeArista 758x
HWAristawszystkie wersjeArista 7804r3
HWAristawszystkie wersjeArista 7808r3
HWAristawszystkie wersjeArista 7812r3
HWAristawszystkie wersjeArista 7816r3
HWAristawszystkie wersjeArista Eos
OSArista4.28.0 – 4.28.4m (bez)4.27.0 – 4.27.7m (bez)4.26.0 – 4.26.9m (bez)4.25.0 – 4.25.10m (bez)4.24.0 – 4.24.11m (bez)4.23 – 4.23.13m
Related vulnerabilities
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the...
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variab...
An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and...
An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConf...
utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short...