Arista Mos vulnerabilities

2 CVEs affecting Arista Mos, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-24547, published 2023-12-06.

More from Arista.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-17596, published 2019-10-24. High severity, CVSS 7.5. EPSS: 4.7% chance of exploitation in the next 30 days. Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client…
• CVE-2023-24547, published 2023-12-06. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. On affected platforms running Arista MOS, the configuration of a BGP password will cause the password to be logged in clear text that can be revealed in local logs or remote logging servers by…