Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access

Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability

Arista Edge Threat Management NGFW UI Arbitrary Command Execution

Arista Edge Threat Management NGFW Captive Portal Custom Handler Command Injection

Arista Edge Threat Management NGFW Reports Application Insecure Input Validation

Arista Edge Threat Management NGFW Captive Portal Encrypted Password Command Injection

A user with administrator privileges is able to retrieve authentication tokens

Arista Edge Threat Management NGFW UI Administrative Cross-Site Scripting