Arista Edge Threat Management Arista Next Generation Firewall (Ngfw)
Approved changes feed: RSS · Atom
cpe:2.3:a:arista_networks:arista_edge_threat_management_-_arista_next_generation_firewall_(ngfw):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Arista Networks (a0182fe3-0447-5099-835f-342e87c54952) |
|---|---|
| Product | Arista Edge Threat Management Arista Next Generation Firewall (Ngfw) (7cb218aa-5271-504c-b05d-49e44ddbeb8c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-25624 |
vulnerable | 2026-06-08 07:53:20.115493 |
Arista Edge Threat Management NGFW UI Administrative Cross-Site Scripting
MEDIUM (5.7)
An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Unvalidated user-supplied variables are echoed back to administrative profiles, facilitating vector payload processing behavior controls.
Published: 2026-06-05T19:34:37.618Z
Updated: 2026-06-05T20:28:03.806Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25623 |
vulnerable | 2026-06-08 07:53:20.115277 |
Arista Edge Threat Management NGFW UI Arbitrary Command Execution
MEDIUM (6)
An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Authenticated administrators can leverage this exposure to obtain underlying terminal script code processing execution permissions.
Published: 2026-06-05T19:31:49.749Z
Updated: 2026-06-05T20:27:23.391Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25622 |
vulnerable | 2026-06-08 07:53:20.115049 |
Arista Edge Threat Management NGFW Captive Portal Custom Handler Command Injection
MEDIUM (6)
A Captive Portal Custom Handler command injection vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). On affected platforms, an administrative account logged into the user interface can exploit this input handling behavior to execute arbitrary platform shell commands.
Published: 2026-06-05T19:29:57.126Z
Updated: 2026-06-05T20:26:59.005Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25621 |
vulnerable | 2026-06-08 07:53:20.114645 |
Arista Edge Threat Management NGFW Reports Application Insecure Input Validation
MEDIUM (6)
A Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) due to insecure input validation. This issue uniquely affects version 17.4.0; earlier software releases are not exposed.
Published: 2026-06-05T19:28:13.886Z
Updated: 2026-06-05T20:26:36.066Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25620 |
vulnerable | 2026-06-08 07:53:20.114356 |
Arista Edge Threat Management NGFW Captive Portal Encrypted Password Command Injection
MEDIUM (6)
An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). This issue uniquely affects version 17.4.0; earlier software releases are not exposed.
Published: 2026-06-05T19:26:36.797Z
Updated: 2026-06-05T20:23:31.151Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.