Arista Ng Firewall vulnerabilities

• arista networks edge threat management - arista next generation firewall (ngfw), arista ng firewall +1 more Arista Edge Threat Management NGFW UI Administrative Cross-Site Scripting CVE-2026-25624 5.8 MediumJune 5, 2026
• arista networks edge threat management - arista next generation firewall (ngfw), arista ng firewall +1 more Arista Edge Threat Management NGFW UI Arbitrary Command Execution CVE-2026-25623 7.0 HighJune 5, 2026
• arista networks edge threat management - arista next generation firewall (ngfw), arista ng firewall +1 more Arista Edge Threat Management NGFW Captive Portal Custom Handler Command Injection CVE-2026-25622 7.0 HighJune 5, 2026
• arista networks edge threat management - arista next generation firewall (ngfw), arista ng firewall +1 more Arista Edge Threat Management NGFW Reports Application Insecure Input Validation CVE-2026-25621 7.0 HighJune 5, 2026
• arista networks edge threat management - arista next generation firewall (ngfw), arista ng firewall +1 more Arista Edge Threat Management NGFW Captive Portal Encrypted Password Command Injection CVE-2026-25620 7.0 HighJune 5, 2026
• arista ng firewall Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability CVE-2025-2767 8.8 HighApril 23, 2025
• arista ng firewall, arista networks edge threat management +1 more Specially constructed queries cause cross platform scripting leaking administrator tokens CVE-2024-9188 8.8 HighJanuary 10, 2025
• arista ng firewall, arista networks edge threat management +1 more A user with advanced report application access rights can perform actions for which they are not authorized CVE-2024-47520 7.6 HighJanuary 10, 2025
• arista ng firewall, arista networks edge threat management +1 more Backup uploads to ETM subject to man-in-the-middle interception CVE-2024-47519 8.3 HighJanuary 10, 2025
• arista ng firewall, arista networks edge threat management +1 more Specially constructed queries targeting ETM could discover active remote access sessions CVE-2024-47518 6.4 MediumJanuary 10, 2025
• arista ng firewall, arista networks edge threat management +1 more Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access CVE-2024-47517 6.8 MediumJanuary 10, 2025
• arista ng firewall, arista networks edge threat management +1 more Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on th… CVE-2024-9134 8.3 HighJanuary 10, 2025
• arista ng firewall, arista networks edge threat management +1 more A user with administrator privileges is able to retrieve authentication tokens CVE-2024-9133 6.6 MediumJanuary 10, 2025
• arista ng firewall, arista networks edge threat management +1 more The administrator is able to configure an insecure captive portal script CVE-2024-9132 8.1 HighJanuary 10, 2025
• arista ng firewall, arista networks edge threat management +1 more A user with administrator privileges can perform command injection CVE-2024-9131 7.2 HighJanuary 10, 2025
• arista ng firewall Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability CVE-2024-12831 6.6 MediumDecember 20, 2024
• arista ng firewall Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability CVE-2024-12832 8.3 HighDecember 20, 2024
• arista ng firewall Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability CVE-2024-12830 8.1 HighDecember 20, 2024
• arista ng firewall Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability CVE-2024-12829 7.2 HighDecember 20, 2024
• arista ng firewall, arista networks edge threat management - arista ng firewall (ngfw) +1 more Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW). CVE-2024-27889 8.8 HighMarch 4, 2024