← Database

CVE-2023-24509

CRITICAL CVSS: 9.3 Published: 2023-04-13 Modified: 2026-06-17

Description

On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login to the standby supervisor as a root user, leading to a privilege escalation. Valid user credentials are required in order to exploit this vulnerability.

Affected Platforms

Arista 7812R3Arista 7512RArista 7816R3Arista 7324XArista 7512R3Arista 758XArista 7804R3Arista 7508RArista 7316XArista 7516R

Weakness Type

CWE-269, NVD-CWE-noinfo

References