Vulnerability · Published Dec 5, 2023 · Assigned by Arista
CVE-2023-24547On Arista MOS configuration of a BGP password will cause the password to be logged in clear text.
Medium 5.9
In plain English
A medium-severity security flaw in MOS from Arista Networks. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).
Severity (CVSS 3.1)5.9Medium
Exploit odds (30 days)0.3%top 72.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
On affected platforms running Arista MOS, the configuration of a BGP password will cause the password to be logged in clear text that can be revealed in local logs or remote logging servers by authenticated users, as well as appear in clear text in the device’s running config.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Arista Networks | MOS | 0.13.0 – through 0.39.4 |