CVE-2023-24512: arista networks terminattr Improper Access Control

Vulnerability summary

CVE-2023-24512 is a high (CVSS 8.8) Improper Access Control vulnerability in arista networks terminattr. EPSS estimates a 0.60% chance of exploitation in the next 30 days, higher than 47.5% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 25-04-2023
   PublishedVulnerability first disclosed.
2. 03-02-2025
   Last modifiedVulnerability information updated.

Description

On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent (referred to as the TerminAttr agent) is enabled and gNMI access is configured on the agent. Note: This gNMI over the Streaming Telemetry Agent scenario is mostly commonly used when streaming to a 3rd party system and is not used by default when streaming to CloudVision

• CWE-284Improper Access ControlThe product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
• CWE-863Incorrect AuthorizationThe product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.