CVE-2024-7142CWE-311

On Arista CloudVision Appliance (CVA) affected releases running on appliances that support hardware disk encryption (DCA-350E-CV only), the disk encryption might not be successfully performed. This results in the disks remaining unsecured and data on them

Medium · published January 10, 2025

CVSS v3.1
4.6
EPSS
0%
Percentile
0.8
In the wild
Unconfirmed
What it is

On Arista CloudVision Appliance (CVA) affected releases running on appliances that support hardware disk encryption (DCA-350E-CV only), the disk encryption might not be successfully performed. This results in the disks remaining unsecured and data on them

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00099 · 0.8th percentile
Weakness
CWE-311 · Missing Encryption of Sensitive Data
Published
2025-01-10T21:18Z
EPSS history
Timeline
  • 10 JAN 21:18Z
    On Arista CloudVision Appliance (CVA) affected releases running on appliances that support hardware disk encryption (DCA-350E-CV only), the disk encryption might not be successfully performed. This results in the disks remaining unsecured and data on them
    cvelistv5