CVE-2023-24547

Summary

CVE-2023-24547 affects Arista MOS platforms, where the configuration of a BGP password results in the password being logged in clear text. This vulnerability poses a risk as clear text passwords can be accessed by authenticated users, either locally or remotely, and are also visible in the device's running config. This issue may lead to unauthorized access to the BGP session if exploited. Arista EOS versions prior to 21.2.3, 22.2.x, and 23.1.x are reportedly impacted. Users are urged to upgrade to a patched version to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.