Critical · published April 13, 2023
🚨 A valid user can sneak into the standby supervisor as a root user! With Arista EOS platforms, this unprivileged user can escalate their privileges, potentially wreaking havoc on the system. 🔥 Think of a security guard allowing a visitor access to the office but forgetting to lock the door when they leave – that visitor can then waltz into the supervisor's office without permission! An attacker with valid credentials could breach the standby supervisor module, gaining root access. This means they could manipulate the system, change configurations, or even disable critical services—talk about a recipe for chaos! 🔥
Think of a security guard allowing a visitor access to the office but forgetting to lock the door when they leave – that visitor can then waltz into the supervisor's office without permission! This vulnerability exists due to the lack of proper access control on redundant supervisor modules in Arista EOS when configured with RPR or SSO, allowing an unprivileged user to escalate privileges once logged in.
An attacker with valid credentials could breach the standby supervisor module, gaining root access. This means they could manipulate the system, change configurations, or even disable critical services—talk about a recipe for chaos! 🔥 To remediate this, ensure you upgrade to the latest version of Arista EOS that patches this vulnerability. Additionally, review user access controls to restrict unnecessary privileges and consider disabling the redundancy protocol if not needed. 🛡️ You've got this! Just follow the steps, and you'll secure your systems in no time! 💪😊