PT-2025-3691 · Arista · Arista Cloudvision Appliance

Published 2025-01-10 · Updated 2025-01-11 · CVE-2024-7142

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Arista CloudVision Appliance (CVA) (affected versions not specified)

Description The issue affects Arista CloudVision Appliance (CVA) releases running on appliances that support hardware disk encryption, specifically the DCA-350E-CV model. The problem is that disk encryption might not be successfully performed, resulting in the disks remaining unsecured and data on them being unprotected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-311

Related Identifiers

CVE-2024-7142

Affected Products

Arista Cloudvision Appliance

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-7142 · Security Note
• https://twitter.com/VulmonFeeds/status/1878055687734931873 · Twitter Post
• https://t.me/cvedetector/15014 · Telegram Post
• https://arista.com/en/support/advisories-notices/security-advisory/20405-security-advisory-0104 · Note
• https://twitter.com/CVEnew/status/1877831985252462687 · Twitter Post