Product by Arista Networks
Arista NG Firewall
20 known vulnerabilities in Arista NG Firewall (Arista Networks), 0 of them actively exploited (CISA KEV).
Key figures
20
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-25620 | Arista Edge Threat Management NGFW Captive Portal Encrypted Password Command Injection | 6.0 | |
| High | CVE-2026-25622 | Arista Edge Threat Management NGFW Captive Portal Custom Handler Command Injection | 6.0 | |
| High | CVE-2026-25623 | Arista Edge Threat Management NGFW UI Arbitrary Command Execution | 6.0 | |
| High | CVE-2024-27889 | Arista Edge Threat Management - Arista NG Firewall (NGFW): SQL Injection | 8.8 | |
| High | CVE-2024-9131 | A user with administrator privileges can perform command injection | 7.2 | |
| High | CVE-2024-12829 | Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability | 7.2 | |
| High | CVE-2024-12830 | Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability | 8.1 | |
| Critical | CVE-2025-2767 | Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability | 8.8 | |
| Critical | CVE-2024-9132 | The administrator is able to configure an insecure captive portal script | 8.1 | |
| High | CVE-2024-9134 | Arista Edge Threat Management: SQL Injection | 8.3 | |
| High | CVE-2024-9188 | Specially constructed queries cause cross platform scripting leaking administrator tokens | 8.8 | |
| High | CVE-2024-12832 | Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability | 8.3 | |
| High | CVE-2024-47520 | Arista Edge Threat Management: Improper Isolation or Compartmentalization | 7.6 | |
| High | CVE-2024-47519 | Backup uploads to ETM subject to man-in-the-middle interception | 8.3 | |
| High | CVE-2026-25621 | Arista Edge Threat Management NGFW Reports Application Insecure Input Validation | 6.0 | |
| Medium | CVE-2024-47517 | Arista Edge Threat Management: Exposure of Sensitive Information Through Metadata | 6.8 | |
| High | CVE-2024-47518 | Specially constructed queries targeting ETM could discover active remote access sessions | 6.4 | |
| Medium | CVE-2026-25624 | Arista Edge Threat Management NGFW UI Administrative Cross-Site Scripting | 5.7 | |
| Medium | CVE-2024-9133 | A user with administrator privileges is able to retrieve authentication tokens | 6.6 | |
| High | CVE-2024-12831 | Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability | 6.6 |