{ "document": { "category": "security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en-US", "publisher": { "category": "vendor", "contact_details": "support@arista.com", "name": "Arista PSIRT", "namespace": "https://www.arista.com" }, "references": [ { "category": "self", "summary": "Security advisory 104 canonical URL", "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/20405-security-advisory-0104" } ], "title": "Security Advisory 104", "tracking": { "current_release_date": "2025-05-08T15:45:25Z", "generator": { "engine": { "name": "Arista Networks SecEng Service CSAF Generator" } }, "id": "Arista Networks Security Advisory 104", "initial_release_date": "2025-05-08T15:45:25Z", "revision_history": [ { "date": "2025-05-08T15:45:25Z", "number": "1", "summary": "Document created" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "CloudVision Appliance version CVA 5.0.2", "product": { "name": "CloudVision Appliance version CVA 5.0.2", "product_id": "CSAFPID-0" } }, { "category": "product_version", "name": "CloudVision Appliance version CVA 6.0.7", "product": { "name": "CloudVision Appliance version CVA 6.0.7", "product_id": "CSAFPID-1" } } ], "category": "product_name", "name": "CloudVision Appliance" } ], "category": "product_family", "name": "Software Products" } ], "category": "vendor", "name": "Arista Networks, Inc." } ] }, "vulnerabilities": [ { "cve": "CVE-2024-7142", "id": { "system_name": "Arista Bug ID", "text": "984230" }, "notes": [ { "category": "description", "text": "On Arista CloudVision Appliance (CVA) affected releases running on appliances that support hardware disk encryption (DCA-350E-CV only), the disk encryption might not be successfully performed. This results in the disks remaining unsecured and data on them being readable without the passphrase. This vulnerability allows local attackers to remove the unencrypted disk from the affected system, then attach to a different system, and access its data.", "title": "CVE Description" }, { "category": "other", "text": "Systems are affected if disk encryption has been enabled using the cva disk encryption enable command. Whether a system is currently in the affected configuration can be determined with the following steps.\n\nPreliminary steps\nTo run the checks described below, it is necessary to run the racadm tool in the privileged mode. The tool is available under the racadm command in CVA version 5 and 6.\n\nThe user will need to know the Fully Qualified Device Descriptor (FQDD) of the RAID controller(s) and the virtual disks. These can be retrieved with the following commands.\n\nTo get the list of FQDD of the RAID controllers, use racadm storage get controllers.\nThe RAID controller(s) will be listed among the others.\n \nTo get the list of FQDD of the virtual disks, run racadm storage get vdisks .\nThe following is an example from a running a system:\n\n[root@cv ~]# racadm storage get controllers\nRAID.SL.3-1\nAHCI.Embedded.2-1\nAHCI.Embedded.1-1\n \n[root@cv ~]# racadm storage get vdisks\nDisk.Virtual.239:RAID.SL.3-1\nDisk.Virtual.238:RAID.SL.3-1\nAdding the -o key to both of these commands will output the properties against each device which include the name and the security status. In addition, the -p option allows the user to query a specific set of properties of the devices. Check https://www.dell.com/support for further details on the racadm command and its options.\n\nDetermining a vulnerable device\nA system is affected if the disk encryption has been configured using the cva disk encryption enable command. Due to this vulnerability, the encryption is only partially configured. A system is affected if both of the following conditions are met.\n\n1. Security key is assigned to the RAID controller\n \nRun the following command:\nracadm storage get controllers: -p SecurityStatus\nIf the output shows SecurityStatus = Security Key Assigned, then the security key has been assigned on the RAID controller.\n\n \nHere is an example:\n[root@cv ~]# racadm storage get controllers:RAID.SL.3-1 -p SecurityStatus\nRAID.SL.3-1\n SecurityStatus = Security Key Assigned\n \nHowever, this aforementioned output does not mean that the disks are indeed encrypted. To verify the disk encryption, follow step 2. Note if the above command does not show Security Status = Security Key Assigned, then the system is not affected by this issue. It means, however, that disk encryption has not been configured on this system. If the appliance supports encryption and encryption is desired, please upgrade to CVA 6.0.7 or a later release and then run the cva disk encryption enable command.\n\n2. Virtual disks are not secured\n \nRun the following command:\nracadm storage get vdisks --refkey -o\nIf the output shows Secured = NO, then the disks are not actually encrypted.\n\n \nThe following output shows the state of a system with unencrypted disks.\n[root@cv ~]# racadm storage get vdisks --refkey RAID.SL.3-1 -o -p Secured\nDisk.Virtual.239:RAID.SL.3-1\n Secured = NO\nDisk.Virtual.238:RAID.SL.3-1\n Secured = NO", "title": "984230: Required Config for Exploitation" } ], "product_status": { "first_affected": [ "CSAFPID-0" ], "fixed": [ "CSAFPID-1" ] }, "references": [ { "category": "external", "summary": "MITRE", "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7142" } ], "remediations": [ { "category": "vendor_fix", "details": "Fixed in CloudVision Appliance version CVA 6.0.7", "product_ids": [ "CSAFPID-1" ] }, { "category": "none_available", "details": "Not fixed in CloudVision Appliance version CVA 5.0.2", "product_ids": [ "CSAFPID-0" ] }, { "category": "mitigation", "details": "To manually fix the issue on a vulnerable system determined by following the steps depicted in the Determining a vulnerable device section, run the following commands to enable the encryption of the virtual disks. The FQDD of the RAID controller(s) and virtual disks will be needed for this mitigation. See the Preliminary steps section on how to retrieve them. Note as the security key was set before on this vulnerable system, it is not needed to set it again here. Please see the Caveats section for more information.\n\nGenerally, the overall process takes up to 10 minutes. The performance of a running system is not expected to degrade when the following steps are carried out.\n\nEncrypt all virtual disks that belong to the RAID controller by running the following command for each of them:\nracadm storage encryptvd:\n \nCreate the job for the RAID controller and monitor its progress:\nracadm jobqueue create --realtime\n \nThis command must return the scheduled configuration job ID in its output. Look for Commit JID = JID_xxxxx in the output.\nThen check the status of this job with racadm jobqueue view -i . It will take up to 10 minutes to complete.\n \nAfter the job is complete, run the following command to see if all the virtual disks are encrypted.\nracadm storage get vdisks --refkey -o\nThe output should show Secured = YES against each one of them.\n\nThe following is an example of the aforementioned steps.\n\n[root@cv ~]# racadm storage encryptvd:Disk.Virtual.238:RAID.SL.3-1\nSTOR094 : The storage configuration operation is successfully completed\nand the change is in pending state.\n<--snip—->\n \n[root@cv ~]# racadm jobqueue create RAID.SL.3-1 --realtime\nRAC1024: Successfully scheduled a job.\nVerify the job status using \"racadm jobqueue view -i JID_xxxxx\" command.\nCommit JID = JID_218438865303\n \n[root@cv ~]# racadm jobqueue view -i JID_218438865303\n---------------------------- JOB -------------------------\n[Job ID=JID_218438865303]\nJob Name=Configure: RAID.SL.3-1\nStatus=Running\n<--snip—->\nPercent Complete=[1]\n \n[root@cv ~]# racadm jobqueue view -i JID_218438865303\n---------------------------- JOB -------------------------\n[Job ID=JID_218438865303]\nJob Name=Configure: RAID.SL.3-1\nStatus=Completed\n<--snip—->\nPercent Complete=[100]\n \n[root@cv ~]# racadm storage get vdisks --refkey RAID.SL.3-1 -o\n \nDisk.Virtual.238:RAID.SL.3-1\n Status = Ok\n DeviceDescription = Virtual Disk 238 on RAID Controller in SL 3\n Name = os\n<--snip—->\n Secured = YES\n<--snip—->\n \nDisk.Virtual.239:RAID.SL.3-1\n Status = Ok\n DeviceDescription = Virtual Disk 239 on RAID Controller in SL 3\n Name = data\n<--snip—->\n Secured = YES\n<--snip—->" } ], "scores": [ { "cvss_v3": { "baseScore": 4.6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-0", "CSAFPID-1" ] } ], "title": "CVE-2024-7142" } ] }