NF
Product
NG Firewall
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 10Medium 8Low 0
Watch
Add NG Firewall to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-9188 | 8.8 | Jan 10 | Specially constructed queries cause cross platform scripting leaking administrator tokens Affected: before 17.2 |
| CVE-2024-12829 | 8.8 | Dec 20 | Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability Affected: 17.1.1 |
| CVE-2024-27889 | 8.8 | Mar 4 | Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW). Affected: through 17.0 |
| CVE-2024-9134 | 8.3 | Jan 10 | Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges. Affected: before 17.2 |
| CVE-2024-12831 | 7.8 | Dec 20 | Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability Affected: 17.1.1 |
| CVE-2024-47520 | 7.6 | Jan 10 | A user with advanced report application access rights can perform actions for which they are not authorized Affected: through 17.1.1 |
| CVE-2024-47518 | 7.6 | Jan 10 | Specially constructed queries targeting ETM could discover active remote access sessions Affected: through 17.1.1 |
| CVE-2024-12830 | 7.3 | Dec 20 | Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability Affected: 17.1.1 |
| CVE-2024-9131 | 7.2 | Jan 10 | A user with administrator privileges can perform command injection Affected: through 17.1.1 |
| CVE-2024-47519 | 7.1 | Jan 10 | Backup uploads to ETM subject to man-in-the-middle interception Affected: through 17.1.1 |
Showing 10