Description
On affected versions of the CloudVision Portal improper access controls on the connection from devices to CloudVision could enable a malicious actor with network access to CloudVision to get broader access to telemetry and configuration data within the system than intended. This advisory impacts the Arista CloudVision Portal product when run on-premise. It does not impact CloudVision as-a-Service.
Published: 2023-06-13
Score: 8.1 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-28562 On affected versions of the CloudVision Portal improper access controls on the connection from devices to CloudVision could enable a malicious actor with network access to CloudVision to get broader access to telemetry and configuration data within the system than intended. This advisory impacts the Arista CloudVision Portal product when run on-premise. It does not impact CloudVision as-a-Service.
History

Mon, 06 Jan 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Subscriptions

Arista Cloudvision Portal
cve-icon MITRE

Status: PUBLISHED

Assigner: Arista

Published:

Updated: 2025-01-06T15:36:36.113Z

Reserved: 2023-01-26T00:00:00.000Z

Link: CVE-2023-24546

cve-icon Vulnrichment

Updated: 2024-08-02T11:03:17.792Z

cve-icon NVD

Status : Modified

Published: 2023-06-13T21:15:09.867

Modified: 2025-01-06T16:15:25.363

Link: CVE-2023-24546

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses