Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

On affected platforms running Arista MOS, the configuration of a BGP password will cause the password to be logged in clear text that can be revealed in local logs or remote logging servers by authenticated users, as well as appear in clear text in the device’s running config.

CVE-2023-24547 is a medium-severity vulnerability affecting Arista Networks MOS (Modular Operating System), specifically version 0.13.0. The vulnerability is classified under CWE-212, which pertains to the storage of sensitive information in an insecure manner. In this case, the issue arises from the handling of BGP (Border Gateway Protocol) passwords. When a BGP password is configured on affected Arista MOS platforms, the password is logged in clear text within local device logs and potentially in remote logging servers if logging is configured accordingly. Additionally, the password appears in clear text within the device's running configuration. This exposure allows any authenticated user with access to the device logs or configuration to retrieve the BGP password in plain text. The CVSS v3.1 base score is 5.9, indicating a medium severity level. The vector indicates that the attack vector is network-based (AV:N), requires high attack complexity (AC:H), requires privileges (PR:H), no user interaction (UI:N), and impacts integrity and availability but not confidentiality (C:N/I:H/A:H). Although confidentiality is marked as not impacted in the CVSS vector, the description clearly states that the password is exposed in clear text, which is a confidentiality concern; this discrepancy may be due to the assumption that only authenticated users can access these logs. No known exploits are reported in the wild, and no patches are currently linked, suggesting that mitigation may require configuration changes or vendor updates. The vulnerability could allow an attacker with authenticated access to escalate privileges or disrupt network operations by leveraging the exposed BGP password to manipulate routing configurations or cause denial of service.

Detailed information about CVE-2023-24547: cwe-212 in Arista Networks MOS affecting Arista Networks MOS. Get real-time updates, technical details, and mitigatio

CVE-2023-24547: cwe-212 in Arista Networks MOS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-24547: cwe-212 in Arista Networks MOS

Threats Tagged 'cve-2023-24547'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-24547'

Lead Pen Test Professional