Executive Summary

This vulnerability occurs on affected Arista EOS platforms where the global common encryption key configuration may be logged in clear text within local or remote accounting logs. If an attacker gains knowledge of this encryption key along with protocol-specific encrypted secrets from the device's running configuration, they could potentially obtain protocol-specific passwords used for symmetric authentication between devices with neighbor protocol relationships.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability could allow an attacker with access to logs and device configurations to retrieve encryption keys and protocol-specific passwords. This could lead to unauthorized access or manipulation of network device communications that rely on symmetric passwords, potentially compromising network security and device integrity.

Useful 0 Not Useful 0