1. Home
  2. CVE Database
  3. CVE-2023-24546
HIGH · 8.1

CVE-2023-24546

On affected versions of the CloudVision Portal improper access controls on the connection from devices to CloudVision could enable a malicious actor with network access to CloudVision to get broader a...

Vulnerability Description

On affected versions of the CloudVision Portal improper access controls on the connection from devices to CloudVision could enable a malicious actor with network access to CloudVision to get broader access to telemetry and configuration data within the system than intended. This advisory impacts the Arista CloudVision Portal product when run on-premise. It does not impact CloudVision as-a-Service.

CVSS Score

8.1

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
AristaCloudvision Portal>= 2021.1, <= 2021.3

Related Weaknesses (CWE)

CWE-284CWE-863

References

FAQ

What is CVE-2023-24546?

CVE-2023-24546 is a vulnerability with a CVSS score of 8.1 (HIGH). On affected versions of the CloudVision Portal improper access controls on the connection from devices to CloudVision could enable a malicious actor with network access to CloudVision to get broader a...

How severe is CVE-2023-24546?

CVE-2023-24546 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-24546?

Check the references section above for vendor advisories and patch information. Affected products include: Arista Cloudvision Portal.