Description
Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW). A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arista Networks | Arista Edge Threat Management - Arista NG Firewall (NGFW) | ≤ 17.0 | — |
Advisories 1
- WID-SEC-2024-0489 Arista EOS: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Jun 4, 2026