Ng Firewall
Approved changes feed: RSS · Atom
cpe:2.3:a:arista:ng_firewall:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Arista (6527c28e-420f-5910-9f50-47683159f01a) |
|---|---|
| Product | Ng Firewall (16c70496-bb09-5872-a730-6ebdaa986f16) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-2767 |
vulnerable | 2026-06-08 07:16:58.210508 |
Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability
HIGH (8.8)
Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Minimal user interaction is required to exploit this vulnerability.
The specific flaw exists within the processing of the User-Agent HTTP header. The issue results from the lack of proper validation of user-supplied data, which can lead to the injection of an arbitrary script. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-24407.
Published: 2025-04-23T16:51:13.474Z
Updated: 2025-04-23T18:04:24.256Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9188 |
vulnerable | 2026-06-08 07:00:26.864519 |
Specially constructed queries cause cross platform scripting leaking administrator tokens
HIGH (8.8)
Specially constructed queries cause cross platform scripting leaking administrator tokens
Published: 2025-01-10T22:05:26.349Z
Updated: 2025-01-13T20:07:56.835Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9134 |
vulnerable | 2026-06-08 07:00:26.711122 |
Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.
HIGH (8.3)
Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.
Published: 2025-01-10T21:44:17.415Z
Updated: 2025-01-13T20:14:00.556Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9133 |
vulnerable | 2026-06-08 07:00:26.710491 |
A user with administrator privileges is able to retrieve authentication tokens
MEDIUM (6.6)
A user with administrator privileges is able to retrieve authentication tokens
Published: 2025-01-10T21:40:24.875Z
Updated: 2025-01-13T17:50:10.084Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9132 |
vulnerable | 2026-06-08 07:00:26.709941 |
The administrator is able to configure an insecure captive portal script
HIGH (8.1)
The administrator is able to configure an insecure captive portal script
Published: 2025-01-10T21:35:14.483Z
Updated: 2025-01-13T17:49:01.649Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9131 |
vulnerable | 2026-06-08 07:00:26.709300 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47520 |
vulnerable | 2026-06-08 06:48:12.522948 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47519 |
vulnerable | 2026-06-08 06:48:12.522560 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47518 |
vulnerable | 2026-06-08 06:48:12.522170 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47517 |
vulnerable | 2026-06-08 06:48:12.521696 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27889 |
vulnerable | 2026-06-08 06:33:24.931359 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12832 |
vulnerable | 2026-06-08 06:25:36.176306 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12831 |
vulnerable | 2026-06-08 06:25:36.175955 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12830 |
vulnerable | 2026-06-08 06:25:36.175581 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12829 |
vulnerable | 2026-06-08 06:25:36.174281 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.