CVE-2024-27889

CVE-2024-27889 affects Arista Edge Threat Management - Arista NG Firewall (NGFW). The vulnerability is a set of SQL injection flaws in the reporting application that can be exploited by a user with advanced report-application access rights; exploitation could allow commands to run on the underlyi...

CVE-2026-25623

CVE-2026-25623 describes a command execution vulnerability in the browser management pipeline of Arista Edge Threat Management NGFW. The issue requires an authenticated administrative user with UI access and affects NGFW versions up to 17.4.0. The advisory indicates the vulnerability allows an ad...

CVE-2024-9134

CVE-2024-9134 is tied to Arista Edge Threat Management - Arista NG Firewall versions up to 17.1.1. The advisory documents multiple SQL Injection vulnerabilities in the reporting application that enable a user with advanced report application access rights to exploit SQL injection and execute comm...

CVE-2024-47520

Summary of CVE-2024-47520 (Arista NGFW/ETM): A user with advanced reporting application access rights can perform actions beyond authorization. Documented as part of Arista Security Advisory 0105, the issue is tied to the reporting component and allows privilege misuse by users with limited admin...

CVE-2024-9188

CVE-2024-9188 affects Arista Edge Threat Management - Arista NG Firewall (NGFW) prior to 17.2. The issue arises from specially constructed queries that trigger cross‑platform scripting, leaking administrator tokens and enabling token exposure. Affected software is the NGFW as described in Arista’...

CVE-2025-2767

CVE-2025-2767 affects Arista NG Firewall. The vulnerability is in the processing of the User-Agent HTTP header, due to lack of validation of user-supplied data, enabling injection of arbitrary script and remote code execution with root privileges. It requires minimal user interaction. Documents r...

CVE-2024-47518

CVE-2024-47518 details (connected doc): Arista NGFW/ETM (Edge Threat Management) is affected on versions 17.1.1 and prior by a vulnerability described as specially constructed queries that could discover active remote access sessions. Root cause is tied to ETM query handling that enables exposure...

CVE-2024-47517

CVE-2024-47517: Affects Arista Edge Threat Management - NG Firewall (ETM) versions 17.1.1 and earlier. Root cause: expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access. Impact: potential exposure of admin tokens, enabling unauthoriz...

CVE-2024-9131

CVE-2024-9131 – Arista NG Firewall (Arista Edge Threat Management) affects Arista NGFW versions 17.1.1 and earlier. The vulnerability allows a user with administrator privileges to perform a command injection via the affected UI/CLI surface. The advisory lists CWE-88 (Improper Neutralization of A...

CVE-2024-12829

The CVE-2024-12829 entry maps to Arista NG Firewall, specifically the ExecManagerImpl component. The flaw is a command-injection vulnerability caused by insufficient validation of a user-supplied string before it is used to execute a system call, allowing remote code execution with root privilege...

CVE-2024-12830

The CVE-2024-12830 entry concerns Arista NG Firewall, where the flaw exists in the custom_handler method and results from insufficient validation of a user-supplied path before file operations. This directory traversal vulnerability allows remote attackers to execute arbitrary code, with no authe...

CVE-2024-47519

CVE-2024-47519 is tied to Arista Edge Threat Management – Arista NG Firewall: backup uploads to ETM can be intercepted via a man-in-the-middle. The advisory details the affected product family and versions (NGFW/ETM, 17.1.1 and prior) and provides explicit remediation guidance. The root cause is ...

CVE-2024-12831

CVE-2024-12831 affects Arista NG Firewall. The vulnerability lies in the uvm_login module, caused by incorrect authorization , enabling a local attacker who can execute code with low privileges to escalate to resources normally protected by the system. Public disclosures in multiple feeds (e.g., ...

CVE-2024-9133

CVE-2024-9133 affects Arista Edge Threat Management - Arista NG Firewall (versions 17.1.1 and earlier). A user with administrator privileges can retrieve authentication tokens via the NGFW UI. The Arista Security Advisory 0105 documents this under CVE-2024-9133 and notes no known mitigation in th...

CVE-2024-12832

Arista NG Firewall vulnerability CVE-2024-12832: ReportEntry allows SQL injection due to insufficient validation of a user-supplied string used to build queries, enabling arbitrary file read/write and potential code execution under www-data. Authenticated requirement; no concrete fix/version info...

CVE-2024-9132

CVE-2024-9132 affects Arista Edge Threat Management – Arista NG Firewall. The advisory details that an administrator can configure an insecure captive portal script, enabling code injection-like behavior. Affected: NGFW versions 17.1.1 and earlier. Impact, per the document, includes insecure port...

CVE-2026-25624

CVE-2026-25624 is an administrative cross-site scripting vulnerability in the web UI dashboard layout of Arista Edge Threat Management NGFW. The issue involves unvalidated user-supplied variables echoed back to administrative profiles, enabling XSS when an attacker has administrative UI access. A...

CVE-2026-25620

The CVE-2026-25620 issue affects Arista Edge Threat Management NGFW (Captive Portal) in version 17.4.0 and earlier. It is a command injection vulnerability within the Captive Portal application framework that can be triggered by actions performed via the NGFW UI, requiring administrative access. ...

CVE-2026-25622

CVE-2026-25622 affects Arista Edge Threat Management NGFW. A Captive Portal Custom Handler command injection exists where an administrative user logged into the UI can exploit input handling to execute arbitrary shell commands on the platform. Affected: NGFW versions up to 17.4.0 (per Arista advi...

CVE-2026-25621

Arista NGFW (Arista Edge Threat Management) Reports application is affected by insecure input validation in version 17.4.0. The vulnerability affects the Reports component (Import/Restore Data Backup Files field) and requires administrative UI access. No exploitation details are provided in the d...