Detections
Analytics
Arista Networks CloudVision Portal Multiple Vulnerabilities (SA0043)
high Nessus Plugin ID 138340
Language:
Synopsis
The version of Arista Networks CloudVision Portal running on the remote device is affected by multiple vulnerabilities.Description
The version of Arista Networks CloudVision Portal running on the remote device is affected by the following vulnerabilities:- HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service (DoS).
An unauthenticated, remote attacker can exploit this, by sending continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both. (CVE-2019-9512)
- HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a DoS. An unauthenticated, remote attacker can open a number of streams and send an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both. (CVE-2019-9514)
- HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a DoS. An unauthenticated, remote attacker can exploit this by sending a stream of SETTINGS frames to the peer.
Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an empty SETTINGS frame is almost equivalent in behavior to a ping. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both. (CVE-2019-9515)
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. To retrieve patch level information this plugin requires the HTTP credentials of the web console.
Solution
Apply the mitigation or upgrade to a fixed version as referenced in the vendor advisory.See Also
Plugin Details
Severity: High
ID: 138340
File Name: arista_cvp_sa0043.nasl
Version: 1.3
Type: remote
Family: Misc.
Published: 7/9/2020
Updated: 12/5/2022
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.4
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 5.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS Score Source: CVE-2019-9515
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:arista:cloudvision_portal
Required KB Items: Settings/ParanoidReport, installed_sw/Arista CloudVision Portal
Exploit Ease: No known exploits are available
Patch Publication Date: 11/6/2019
Vulnerability Publication Date: 8/13/2019