CVE-2023-6068: arista networks mos Unverified Ownership
CVSS: 3.1v3.1LowAnalyzed
Published 04-03-2024Last modified 02-08-2024
Vulnerability summary
CVE-2023-6068 is a low (CVSS 3.1) Unverified Ownership vulnerability in arista networks mos. EPSS estimates a 0.34% chance of exploitation in the next 30 days, higher than 25.8% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
3.1/10
010
Low · v3.1 (CVE.org)EPSS score
0.34%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference
Timeline
- 04-03-2024PublishedVulnerability first disclosed.
- 02-08-2024Last modifiedVulnerability information updated.
Description
On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of the configured ACL for a port resulting in some packets that should be denied being permitted and some
CVSS metrics
2 scores · 2 sources · 1 versionLow 3.1Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:NSourcesAll 2 agree
- NVDNIST3.1LowCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS trend
Probability
0.34%
Chance of exploitation in the next 30 days
Percentile
26%
Versus all other CVEs
30-day change
0.00 pp
From 0.34% on 19-09-2026
19-09-202619-10-2026
EPSS score0.34%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (arista.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Arista1 product
- multiaccess≥ 1.6.0, < 1.7.0 | 1.7.1
Arista networks1 product
- mos1.7.1 | 1.6
2 vendors · 2 products
References
1 links- www.arista.com/en/support/advisories-notices/security-advisory/19023-security-advisory-0091ExploitMitigationVendor Advisory