CVE-2023-24547

On Arista MOS configuration of a BGP password will cause the password to be logged in clear text.

Medium · published December 5, 2023

CVSS v3.1
5.9
EPSS
0%
Percentile
26.1
In the wild
Unconfirmed
What it is

On affected platforms running Arista MOS, the configuration of a BGP password will cause the password to be logged in clear text that can be revealed in local logs or remote logging servers by authenticated users, as well as appear in clear text in the device’s running config.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00339 · 26.1th percentile
Published
2023-12-05T23:29Z
EPSS history
Timeline
  • 05 DEC 23:29Z
    On Arista MOS configuration of a BGP password will cause the password to be logged in clear text.
    cvelistv5